| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 14.5, < 14.5.4≥ 14.6, < 14.6.4≥ 14.7, < 14.7.1 | 14.5.414.6.414.7.1 |
Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free