CVE-2017-0921 | BDVDB-2026-103277 Detail

Description#

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://about.gitlab.com/2018/05/29/security-release-gitlab-10-dot-8-dot-2-released/

Exploit#

No public exploit known

History#

Version 12018-07-03Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.