GitLab Patches Critical Account Takeover Vulnerability
DevOps platform GitLab has reset the passwords of some user accounts, after addressing a critical account takeover vulnerability.
According to the company, in GitLab Community Edition (CE) and Enterprise Edition (EE) versions prior to 14.7.7, 14.8.5, and 14.9.2, a hardcoded password was set when the account was registered using an OmniAuth provider.
Read more: GitLab Patches Critical Account Takeover Vulnerability
Story added 4. April 2022, content source with full text you can find at link above.