| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.11.0, < 13.11.5≥ 13.12.0, < 13.12.2≥ 7.10.0, < 13.10.5 | 13.11.513.12.213.10.5 |
A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free