Gitlab: Account Takeover via Password Reset

Great, my account actually just got hit with this. Are we absolutely sure this is solved?

Thank the lord I didn't have anything all that important, and I was in front of my computer to change my password immediately.

As far as I can tell, no one signed into my account. Pretty embarrassing vulnerability tbh...

(2023)

insane