| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 4.3.0≥ 13.0.0, < 14.1.7≥ 14.2.0, < 14.2.5 | 14.1.714.2.5 |
In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free