GitLab | Report #2293343 - Account Takeover via Password Reset without user interactions | HackerOne

https://hackerone.com/reports/2293343