| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.5, < 13.10.5≥ 13.11, < 13.11.5≥ 13.12, < 13.12.2 | 13.10.513.11.513.12.2 |
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free