| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 0.8.0= 0.9.1= 0.9.4= 0.9.6= 1.0.0= 1.0.1= 1.0.2= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 2.0.0= 2.1.0= 2.2.0= 2.3.0= 2.3.1= 2.4.0= 2.5.0= 2.6.0= 2.7.0= 2.8.0= 2.8.1= 2.9.0= 2.9.1= 3.0.0= 3.0.1= 3.0.2= 3.0.3= 3.1.0= 4.0.0= 4.1.0= 4.2.0= 5.0.0= 5.0.1= 5.1.0= 5.2.0= 5.3.0= 5.4.0= 5.4.1= 5.4.2= 6.0.0= 6.1.0= 6.2.0= 6.2.1= 6.2.2≤ 6.2.0≤ 6.2.3 | |
| gitlab-shell | = 1.0.4= 1.1.0= 1.2.0= 1.3.0= 1.4.0= 1.5.0= 1.6.0= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 1.7.6≤ 1.7.7 |
GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free