| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 8.11.0, ≤ 12.0.2 |
An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free