| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.1.0, < 14.7.7≥ 14.8.0, < 14.8.5≥ 14.9.0, < 14.9.2 | 14.7.714.8.514.9.2 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the repository mirroring feature was possible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free