CVE-2017-0921

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim’s session is compromised.

Date published : 2018-07-03

https://about.gitlab.com/2018/05/29/security-release-gitlab-10-dot-8-dot-2-released/