writeups.xyz / Understanding GitLab EE/CE Account TakeOver (CVE-2023-7028)

Submitter : c2a

Date: 17 January 2024

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Password Reset

Programs :

• GitLab

Authors :

• Ravi Solanki (@SolankiRV3)
• Punit

Link :
https://secops.group/understanding-gitlab-ee-ce-account-takeover-cve-2023-7028/