| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.2.0, < 13.2.8≥ 13.3.0, < 13.3.4< 13.1.10 | 13.2.813.3.413.1.10 |
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. When 2 factor authentication was enabled for groups, a malicious user could bypass that restriction by sending a specific query to the API endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free