Summary by SaeidMicro
A critical vulnerability was identified on gitlab.smce.nasa.gov due to an OAuth misconfiguration that allowed for account takeover using a known exploit (CVE-2023-7028).
Account take over at https://gitlab.smce.nasa.gov/
Disclosed by SaeidMicro- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date over 1 year ago
- Priority P1 Bugcrowd's VRT priority rating
- Status Resolved This vulnerability has been accepted and fixed