| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 6.0.0, ≤ 6.9.2≥ 7.0.0, < 7.4.3 | 7.4.3 |
The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free