An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 17.3.0 | 17.3.1 |
| gitlab / gitlab | 17.2.0 | 17.2.4 |
| gitlab / gitlab | 17.0.0 | 17.1.6 |