| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.3, < 16.7.7≥ 16.8.0, < 16.8.4≥ 16.9.0, < 16.9.2 | 16.7.716.8.416.9.2 |
An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free