CVE-2017-0921

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController…

published July 3, 2018

CVSS
—
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01068 · 64.5th percentile
Published
2018-07-03T21:00Z
EPSS history
Timeline
  • 03 JUL 21:00Z
    GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController…
    cvelistv5