An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for Information Exposure via unsubscribe links in email replies.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 11.4.0 | 11.4.3 |
| gitlab / gitlab | 11.3.0 | 11.3.8 |
| gitlab / gitlab | - | 11.2.7 |