| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.2.0, < 12.2.7≥ 12.3.0, < 12.3.3< 12.1.13 | 12.2.712.3.312.1.13 |
An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free