QID 378330

GitLab Inc. is an open-core company that operates GitLab, a DevOps software package which can develop, secure, and operate software

Affected Gitlab Versions:
All versions from 12.8 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
All versions from 13.11 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
EE/CE All versions from 11.5 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
All versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to 15.10.1
All versions from 13.6 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
CE/EE All versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1
versions from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1
All versions from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1
All versions from All versions from 15.7 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
EE All versions from 12.3.0 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
All versions from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1
All versions from 15.5 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
All versions from 11.10 before 15.8.5, All versions from 15.9 before 15.9.4, All versions from 15.10 before 15.10.1
QID Detection Logic:(Authenticated)
It fires gitlab-rake gitlab:env:info command to check vulnerable version of GitLab.

Successful exploitation of the vulnerability may lead to remote code and other multiple execution.