| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 8.10.0= 8.10.12= 8.10.13= 8.11.0= 8.11.10= 8.11.9= 8.12.0= 8.12.7= 8.12.8= 8.13.0= 8.13.2= 8.13.3= 8.14.0= 8.14.1= 8.14.2= 8.14.3= 8.14.4= 8.14.5= 8.14.6= 8.15.0= 8.15.1= 8.15.2= 8.15.3= 8.15.4= 8.15.5= 8.15.6= 8.15.7= 8.16.0= 8.16.1= 8.16.2= 8.16.3= 8.16.4= 8.16.5= 8.16.6= 8.16.7= 8.17.0= 8.17.1= 8.17.2= 8.17.3= 8.2.0= 8.2.1= 8.2.2= 8.2.3= 8.2.4= 8.2.5= 8.3.0= 8.3.8= 8.3.9= 8.4.0= 8.4.10= 8.4.9= 8.5.0= 8.5.11= 8.5.12= 8.6.0= 8.6.7= 8.6.8= 8.7.0= 8.7.1 |
Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free