| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.0.0, < 12.0.8≥ 12.1.0, < 12.1.8≥ 12.2.0, < 12.2.3 | 12.0.812.1.812.2.3 |
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free