| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 15.6.0, < 15.6.4≥ 15.7.0, < 15.7.2< 15.5.7 | 15.6.415.7.215.5.7 |
An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A race condition can lead to verified email forgery and takeover of third-party accounts when using GitLab as an OAuth provider.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free