| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 12.8.0, < 12.8.9≥ 12.9.0, < 12.9.3< 12.7.9 | 12.8.912.9.312.7.9 |
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free