| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.1.0, < 12.1.14≥ 12.2.0, < 12.2.8≥ 12.3.0, < 12.3.5 | 12.1.1412.2.812.3.5 |
An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free