| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 14.3.0, < 14.3.4< 14.2.6 | 14.3.414.2.6 |
Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free