| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 15.2≥ 13.0.0, < 15.0.5≥ 15.1.0, < 15.1.4 | 15.0.515.1.4 |
A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1 allows a malicious Group Owner to retain a usable Group Access Token even after the Group is deleted, though the APIs usable by that token are limited.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free