CVE-2023-2825

CVE-2023-2825

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.

CVSS 10.0 · Critical · EPSS 71.6% · Public exploit

Published

2023-05-26T00:00:00.000Z

Updated

2025-01-15T15:45:18.054Z

Stack: system

Check your server →