A critical security vulnerability in GitLab, known as CVE-2023-7028, is actively exploited by attackers to hijack user accounts by redirecting password reset notifications to unauthorized email addresses.
View full story…