| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.8.0, ≤ 13.0.1 |
A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in GitLab CE/EE 12.8 and later through 13.0.1
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free