| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.8.0, < 15.5.7≥ 15.6.0, < 15.6.4≥ 15.7.0, < 15.7.2 | 15.5.715.6.415.7.2 |
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak the sentry token by changing the configured URL in the Sentry error tracking settings page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free