CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It affects GitLab. Its EPSS score suggests a 71.6% probability of exploitation in the next 30 days.
CVE
CVE-2023-2825
Severity
CRITICAL
CVSS
10
EPSS
71.64%
GitLab
Original NVD Description
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.
Related CVEs
Other vulnerabilities affecting the same vendor(s)