| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.3.12, < 11.4.8≥ 11.4.9, < 11.5.1≥ 8.17.0, < 11.3.11≥ 8.3.0, < 11.3.11 | 11.4.811.5.111.3.11 |
GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free