CyberzSOC

and Mattermost integrations to execute slash commands as another user. the required CODEOWNERS approval by adding changes to a previously approved merge Within these versions, all authentication mechanisms are impacted. Additionally, users who have two-factor authentication enabled are vulnerable to password reset but not account takeover as their second authentication factor is required to login. It is strongly recommended to upgrade all GitLab installations to one of the new versions immediately. The release also emphasises the importance of enabling Two-Factor Authentication (2FA) for additional security. At the moment, the editor did not detect any abuse of the vulnerability CVE-2023-7028 on platformsmanagedbyGitLab,including GitLab.com andGitLabDedicatedinstances. Nevertheless, regarding the self-managed instances, customers can review their logs to check for possible attempts to exploit this vulnerability: with params.value.email consisting of a JSON array with multiple email addresses. and target_details consisting of a JSON array with multiple email addresses.