topic Re: More Than 5,000 GitLab Instances Still Vulnerable to Password Reset Issue in Threats

More Than 5,000 GitLab Instances Still Vulnerable to Password Reset Issue

Kyaw_Myo_Oo — Sat, 27 Jan 2024 14:11:53 GMT

Dear all,

A critical vulnerability in GitLab disclosed earlier this month allows account takeovers without user interaction. GitLab released Critical Security Release: 16.7.2, 16.6.4, 16.5.6 for GitLab Community Edition (CE) and Enterprise Edition (EE) to address the vulnerability and four others. As of Tuesday, January 23, more than 5,300 GitLab instances remain unpatched, according to data from the Shadowserver Foundation.

https://www.bleepingcomputer.com/news/security/over-5-300-gitlab-servers-exposed-to-zero-click-account-takeover-attacks/?is=2e17210a000df3b23714ee0b7fabf90d53a139a7fd871f741a8f77fe7ad94a1a

Re: More Than 5,000 GitLab Instances Still Vulnerable to Password Reset Issue

Early_Adopter — Sat, 27 Jan 2024 22:36:16 GMT

You know I think this isn’t lazy to patch, it’s just a bunch of really smart administrators outsourcing the awful chore of password management…

Re: More Than 5,000 GitLab Instances Still Vulnerable to Password Reset Issue

Kyaw_Myo_Oo — Tue, 30 Jan 2024 00:59:13 GMT

@Early_Adopter Thank you for contributing your thoughts.