An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.
- https://gitlab.com/gitlab-org/gitlab-ee/issues/11643
- https://hackerone.com/reports/565883
No PoCs found on GitHub currently.