| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 14.3.0≥ 12.0, < 14.1.7≥ 14.2, < 14.2.5 | 14.1.714.2.5 |
In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainer role on and disclose email addresses of those users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free