An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 15.1.0 | 18.1.6 |
| gitlab / gitlab | 18.2.0 | 18.2.6 |
| gitlab / gitlab | 18.3.0 | 18.3.2 |