Security Advisory

CVE-2017-0921

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-03 21:00:00

Last updated 2024-09-17 00:40:46

Assigner hackerone

State PUBLISHED

Description

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victims session is compromised.

← Browse all CVEs View on cve.org ↗