{"cvss":10.0,"datePublished":"2026-08-02T00:00:00Z","dateUpdated":"2026-08-02T00:00:00Z","description":"An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.","dueDate":"","id":"CVE-2023-2825","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"GitLab","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"GitLab GitLab Improper Limitation of a Pathname to a Restricted Directory","vendor":"GitLab"}