CVE-2017-0921

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsContr...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory about.gitlab.com