CVE-2017-0921

CVE-2017-0921

This page contains facts from public vulnerability sources. Check the original advisory before updating.

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

CVSS 8.1 · High · EPSS 1.1%

Published

2018-07-03T21:00:00.000Z

Updated

2024-09-17T00:40:46.151Z

Stack: system

Check your server →