| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 14.3.0= 14.3.1≥ 14.1.1, < 14.1.7≥ 14.2.0, < 14.2.5 | 14.1.714.2.5 |
It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free