| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 13.12.0, < 13.12.6≥ 14.0.0, < 14.0.2 | 13.12.614.0.2 |
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free