| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 11.9.0, ≤ 12.0.2 |
An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free