CVE-2023-2825

CRITICAL · CVSS 10 EPSS 71.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-05-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-2825

Severity

CRITICAL

CVSS

EPSS

71.64%

GitLab

Original NVD Description

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.