Exploit Details
Basic Information
| Exploit Title |
Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab |
| Exploit ID |
087709DE-4BA3-54A0-A3F7-D0E07D4C356B |
| Type |
githubexploit |
| Published |
2025-07-21T12:34:29 |
| Modified |
2025-07-21T12:38:10 |
CVSS Information
| CVSS Score |
10.0 |
| Severity |
CRITICAL |
| Vector |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N |
AI Analysis
| AI Description |
This vulnerability exploits a weak password recovery mechanism in GitLab, allowing attackers to take over user accounts. The exploit demonstrates a critical security flaw in the forgotten password feature, enabling unauthorized access. This issue is particularly severe due to its potential impact on user accounts and data integrity. |
| AI Severity |
Critical |
| AI Vendor |
GitLab Inc. |
| AI Product |
GitLab |
| AI Version |
Unknown |
CVE Information
Exploit Description
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on…
View Full Exploit Details
