Untitled attachment

Notices where this attachment appears

1. Embed this notice
   The Shadowserver Foundation (shadowserver@infosec.exchange)'s status on Wednesday, 24-Jan-2024 20:28:11 JST The Shadowserver Foundation

   Running GitLab? We are sharing instances vulnerable to CVE-2023-7028 (Account Takeover via Password Reset without user interactions) - 5379 instances found worldwide (on 2024-01-23). Top: US (964) & Germany (730)

   Check for signs of compromise and patch: https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/

   IP Data shared in our Vulnerable HTTP Report (filtered by your network/constituency): https://shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/

   Dashboard World Map: https://dashboard.shadowserver.org/statistics/combined/map/?map_type=std&day=2024-01-23&source=http_vulnerable&source=http_vulnerable6&tag=cve-2023-7028%2B&geo=all&data_set=count&scale=log