| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.2.0, < 13.2.8≥ 13.3.0, < 13.3.4< 13.1.10 | 13.2.813.3.413.1.10 |
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions GitLab was not properly revoking user sessions and allowed a malicious user to access a user account with an old password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free