Multiple vulnerabilities were identified in GitLab. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, cross-site scripting, denial of service condition and security restriction bypass on the targeted system. GitLab has released versions 15.4.1, 15.3.4, 15.2.5 for GitLab Community Edition (CE) and Enterprise Edition (EE).

More information on vulnerabilities and updates is available in GitLab security advisory – gitlab.com.