GitLab | Report #2293343 - Account Takeover via Password Reset without user interactions | HackerOne

https://hackerone.com/reports/2293343

https://twitter.com/home/status/1894636047591481634

https://twitter.com/home/status/1894636201468203098

https://twitter.com/home/status/1894654626072236503

https://twitter.com/home/status/1894656608824639968

https://twitter.com/home/status/1894737307141304652

https://twitter.com/home/status/1894815200756347337

https://twitter.com/home/status/1894829182276038767

https://twitter.com/home/status/1894836813233066244

https://twitter.com/home/status/1894879851976552901