| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.5.0, ≤ 12.3.8≥ 12.4.0, ≤ 12.4.5≥ 12.5.0, ≤ 12.5.3 |
In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free