path: root/changelogs/unreleased/security-users-can-update-their-password-without-entering-current-password.yml

---
title: Prevent user passwords from being changed without providing the previous password
merge_request:
author:
type: security