CVE-2018-19580

CVE-2018-19580 affects GitLab versions prior to 11.5.1, 11.4.8, and 11.3.11. The issue is that when an account’s email address is changed, GitLab does not send a notification email to the old address. The connected documents confirm the affected versions and the observed behavior, but do not prov...