An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure vulnerability using quick actions commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade gitlab-ce | Nov 4, 2022 | Mar 9, 2022 |
| Gitlab | — | Upgrade to Gitlab v14.8.2Upgrade to Gitlab v14.6.5Upgrade to Gitlab v14.7.4 | Mar 1, 2022 | Feb 26, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub