Account Takeover

Gitlab

Year	Title	Severity	Report
2025	Account Takeover via Password Reset without user interactions	🔴 Critical 10.0	link
	Account takeover due to insufficient URL validation on RelayState parameter	🟡 Medium 6.8	link