| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.8.0, < 13.2.10≥ 13.3.0, < 13.3.7≥ 13.4.0, < 13.4.2 | 13.2.1013.3.713.4.2 |
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free