Security Advisory
CVE-2017-0921
8.1
HIGH
Vulnerability Description
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.
Published Date
July 3, 2018
Official Source
NIST NVD Advisory