| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 14.4.0≥ 13.0.0, < 14.2.6≥ 14.3.0, < 14.3.4 | 14.2.614.3.4 |
In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility level of a group or a project to a restricted option even after the instance administrator sets that visibility option as restricted in settings.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free