GITLAB WARNS OF CRITICAL ZERO-CLICK ACCOUNT HIJACKING VULNERABILITY

Summary from the TLDR InfoSec newsletter

GitLab has released updates for two critical vulnerabilities, including CVE-2023-7028 for account takeover without user interaction by resetting passwords via unverified emails. CVE-2023-7028 has a 10.0 CVSS score. GitLab has released patches to address the critical flaws.