| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 14.3.0≥ 13.10.0, < 14.1.7≥ 14.2.0, < 14.2.5 | 14.1.714.2.5 |
In all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 a specific API endpoint may reveal details about a private group and other sensitive info inside issue and merge request templates.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free