cve/2023/CVE-2023-2825.md

CVE-2023-2825

Description

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.

POC

Reference

No PoCs from references.

Github

• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/EmmanuelCruzL/CVE-2023-2825
• https://github.com/GhostTroops/TOP
• https://github.com/Occamsec/CVE-2023-2825
• https://github.com/Rubikcuv5/CVE-2023-2825
• https://github.com/Threekiii/CVE
• https://github.com/Tornad0007/CVE-2023-2825-Gitlab
• https://github.com/abrahim7112/Vulnerability-checking-program-for-Android
• https://github.com/caopengyan/CVE-2023-2825
• https://github.com/hheeyywweellccoommee/CVE-2023-2825-zaskh
• https://github.com/hktalent/TOP
• https://github.com/johe123qwe/github-trending
• https://github.com/nomi-sec/PoC-in-GitHub