Enlarge A maximum severity vulnerability that allows hackers to hijack GitLab accounts with no user interaction required is now under active exploitation, federal government officials warned as data showed that thousands of users had yet to install a patch released in January. A change GitLab implemented in May 2023 made it possible for users to initiate password changes through links sent to secondary email addresses.

NEXT
Topics:  enlarge   mfa   cve-2023-7028   comments   a   gitlab   january   users   reset   severity   user   resets   
BING NEWS:
  • GitLab issues patch for high severity account takeover vulnerability
    As a result, GitLab accounts are generally considered a popular target among hackers. Earlier this month, CISA warned of a maximum-severity zero-click account hijacking flaw that hackers are abusing ...
    05/24/2024 - 3:30 am | View Link
  • Several GitLab vulnerabilities addressed
    GitLab has issued fixes for several security vulnerabilities through the latest versions of its Community Edition and Enterprise Edition software, BleepingComputer reports.
    05/24/2024 - 3:08 am | View Link
  • High-severity GitLab flaw lets attackers take over accounts
    GitLab patched a high-severity vulnerability that unauthenticated attackers could exploit to take over user accounts in cross-site scripting (XSS) attacks.
    05/23/2024 - 6:43 am | View Link
  • More

 

NEXT
Welcome to Wopular!

Welcome to Wopular

Wopular is an online newspaper rack, giving you a summary view of the top headlines from the top news sites.

Senh Duong (Founder)
Wopular, MWB, RottenTomatoes

Subscribe to Wopular's RSS Fan Wopular on Facebook Follow Wopular on Twitter Follow Wopular on Google Plus

MoviesWithButter : Our Sister Site

Movies With Butter More Movie News

More Business News