| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | ≥ 15.7, < 15.7.6≥ 15.8, < 15.8.1< 15.6.7 | 15.7.615.8.115.6.7 |
A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and all versions starting from 15.8 before 15.8.1. An attacker could take over a project if an Owner or Maintainer uploads a file to a malicious project.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free