| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.11.0, < 11.11.7≥ 12.0.0, < 12.0.4≥ 12.1.0, < 12.1.2 | 11.11.712.0.412.1.2 |
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free