| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 15.4≥ 15.2, ≤ 15.2.5≥ 15.2, < 15.2.5≥ 15.3, ≤ 15.3.4≥ 15.3, < 15.3.4 | 15.2.515.3.4 |
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 It was possible to exploit a vulnerability in the external status checks feature which could lead to a stored XSS that allowed attackers to perform arbitrary actions on behalf of victims at client side.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free