| Package | Affected versions | Patched versions |
|---|---|---|
| gitlab | = 16.8.0≥ 13.7.0, < 16.6.6≥ 16.7.0, < 16.7.4 | 16.6.616.7.4 |
An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free