← All credits

Thanks [a0xnirudh](https://hackerone.com/a0xnirudh) for reporting this vulnerability through our HackerOne bug bounty program

4 vulnerability records and advisories credit this contributor.

Authorization Bypass Through User-Controlled Key in GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

Authentication Bypass Using an Alternate Path or Channel in GitLab