GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.
{
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"extracted_events": [
{
"introduced": "8.4.0"
},
{
"fixed": "12.3.8"
},
{
"introduced": "12.4.0"
},
{
"fixed": "12.4.5"
},
{
"introduced": "12.5.0"
},
{
"fixed": "12.5.2"
}
]
}