CVE-2023-2825 Scanner
CVE-2023-2825 scanner - Path Traversal vulnerability in GitLab
Used 3.2k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2023-2825
7.5
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
gitlab
Updated Sep 22, 2026View on NVD →
S4E scanner
CVE history: gitlab
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →