| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 14.8.0, < 14.8.5≥ 14.9.0, < 14.9.2≥ 8.3.0, < 14.7.7 | 14.8.514.9.214.7.7 |
Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a stored XSS by abusing multi-word milestone references in issue descriptions, comments, etc.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free