| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 15.10, < 16.6.1≥ 16.4.0, < 16.4.3≥ 16.5.0, < 16.5.3 | 16.6.116.4.316.5.3 |
Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free