| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.4.0, < 12.4.4≥ 12.5.0, < 12.5.1≥ 8.14.0, < 12.3.7 | 12.4.412.5.112.3.7 |
GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free