GitLab 13.4 < 14.10.5 / 15.0 < 15.0.4 / 15.1 < 15.1.1 (CVE-2022-1963)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1...

CVE-2022-1963

CVE-2022-1963 affects GitLab CE/EE versions: 13.4–14.10.4, 15.0–15.0.3, and 15.1–15.1.0. The root cause is that GitLab may reveal whether a user has enabled two‑factor authentication in the HTML source to unauthenticated users. This is an information‑disclosure issue with potential privacy implic...