An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 14.6 | 14.6.4 |
| gitlab / gitlab | 14.7 | 14.7.x |
| gitlab / gitlab | 13.5 | 14.5.4 |