5012c62240
Devise checks before updating any of the authentication_keys if it needs to clear the reset_password_tokens. This should fix: https://gitlab.com/gitlab-org/gitlab-ce/issues/42733 (Weak authentication and session management)
6 lines
154 B
YAML
6 lines
154 B
YAML
---
|
|
title: Fix weak session management by clearing password reset tokens after login (username/email)
|
|
are updated
|
|
merge_request:
|
|
author:
|
|
type: security
|