| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.5.0, < 13.5.6≥ 13.6.0, < 13.6.4≥ 13.7.0, < 13.7.2 | 13.5.613.6.413.7.2 |
Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a maliciously crafted link
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free