| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.1.0, < 12.9.1 | 12.9.1 |
GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free