| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 10.4.0, ≤ 10.4.5≥ 10.5.0, ≤ 10.5.5≤ 10.3.8 |
The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing in unintended users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free