CISA warned that this class of security flaws are 'frequent attack vectors' for cyber criminals, due to their simplicity to exploit, and thus pose significant risks to enterprises.
GitLab noted in the January advisory that organizations that have 2FA enabled should be immune to this attack, although it advised users who have received reset emails without triggering them to reset their credentials as soon as possible.
[
add
]
[
|
|
...
]