| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.2.0, < 12.2.6≥ 12.3.0, < 12.3.2< 12.1.10 | 12.2.612.3.212.1.10 |
A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions and email verification requirements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free