Maximum-severity Gitlab CVE allowing account hijacking under active exploitation

https://arstechnica.com/security/2024/05/0-click-gitlab-hijacking-flaw-under-active-exploit-with-thousands-still-unpatched/

{
  "by": "nukemandan",
  "descendants": 1,
  "id": 40243925,
  "kids": [
    40243948
  ],
  "score": 7,
  "time": 1714709141,
  "title": "Maximum-severity Gitlab CVE allowing account hijacking under active exploitation",
  "type": "story",
  "url": "https://arstechnica.com/security/2024/05/0-click-gitlab-hijacking-flaw-under-active-exploit-with-thousands-still-unpatched/"
}

{
  "author": null,
  "date": null,
  "description": null,
  "image": null,
  "logo": null,
  "publisher": "Ars Technica",
  "title": "403 Forbidden",
  "url": "https://arstechnica.com/security/2024/05/0-click-gitlab-hijacking-flaw-under-active-exploit-with-thousands-still-unpatched/"
}

null