| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.2.0, < 10.2.6≥ 10.3.0, < 10.3.4< 10.1.6 | 10.2.610.3.410.1.6 |
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free