| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 16.7.0= 16.7.1≥ 16.6.0, < 16.6.4≥ 8.13.0, < 16.5.6 | 16.6.416.5.6 |
Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free