| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 8.10.0= 8.10.1= 8.10.10= 8.10.11= 8.10.12= 8.10.13= 8.10.2= 8.10.3= 8.10.4= 8.10.5= 8.10.6= 8.10.7= 8.10.8= 8.10.9= 8.11.0= 8.11.1= 8.11.10= 8.11.11= 8.11.2= 8.11.3= 8.11.4= 8.11.5= 8.11.6= 8.11.7= 8.11.8= 8.11.9= 8.12.0= 8.12.1= 8.12.10= 8.12.11= 8.12.12= 8.12.2= 8.12.3= 8.12.4= 8.12.5= 8.12.6= 8.12.7= 8.12.8= 8.12.9= 8.13.0= 8.13.1= 8.13.10= 8.13.11= 8.13.2= 8.13.3= 8.13.4= 8.13.5= 8.13.6= 8.13.7= 8.13.8= 8.13.9= 8.14.0= 8.14.1= 8.14.10= 8.14.2= 8.14.3= 8.14.4= 8.14.5= 8.14.6= 8.14.8= 8.14.9= 8.15.0= 8.15.1= 8.15.2= 8.15.3= 8.15.4= 8.15.6= 8.15.7= 8.15.8= 8.16.0= 8.16.1= 8.16.2= 8.16.3= 8.16.4= 8.16.5= 8.16.6= 8.16.7= 8.16.8= 8.16.9= 8.17.0= 8.17.1= 8.17.2= 8.17.3= 8.17.4= 8.17.5= 8.17.6= 8.5.0= 8.5.1= 8.5.10= 8.5.11= 8.5.12= 8.5.13= 8.5.2= 8.5.3= 8.5.4= 8.5.5= 8.5.6= 8.5.7= 8.5.8= 8.5.9= 8.6.0= 8.6.1= 8.6.2= 8.6.3= 8.6.4= 8.6.5= 8.6.6= 8.6.7= 8.6.8= 8.6.9= 8.7.0= 8.7.1= 8.7.2= 8.7.3= 8.7.4= 8.7.5= 8.7.6= 8.7.7= 8.7.8= 8.7.9= 8.8.0= 8.8.1= 8.8.2= 8.8.3= 8.8.4= 8.8.5= 8.8.6= 8.8.7= 8.8.8= 8.8.9= 8.9.0= 8.9.1= 8.9.10= 8.9.11= 8.9.2= 8.9.3= 8.9.4= 8.9.5= 8.9.6= 8.9.7= 9.0.0= 9.0.1= 9.0.10= 9.0.2= 9.0.3= 9.0.4= 9.0.5= 9.0.6= 9.0.7= 9.0.8= 9.0.9= 9.1.0= 9.1.1= 9.1.2= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.1.7= 9.2.0= 9.2.1= 9.2.2= 9.2.3= 9.2.4= 9.2.5= 9.2.6= 9.2.7= 9.3.0= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.3.5= 9.3.6= 9.3.7 |
GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free