Tag: Two-Factor Authentication
Anyone holding your GitLab issue email can commit code as you
Aikido Security found GitLab's per-user issue email doubles as a non-expiring token that can commit code as the account owner.
Aikido Security found GitLab's per-user issue email doubles as a non-expiring token that can commit code as the account owner.