| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 14.1.0, < 14.1.7≥ 14.2.0, < 14.2.5≥ 14.3.0, < 14.3.1 | 14.1.714.2.514.3.1 |
In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free