| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 16.4.0≥ 13.11, < 16.2.8≥ 16.3.0, < 16.3.5 | 16.2.816.3.5 |
An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows an attacker to extract non-protected CI/CD variables by tricking a user to visit a fork with a malicious CI/CD configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free