| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 4.3.0≥ 14.1.0, < 14.1.7≥ 14.2.0, < 14.2.5 | 14.1.714.2.5 |
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free