VulnSocial

CVE-2023-2825Patch(gitlab / gitlab)

MEDIUMCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch gitlab gitlab systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.

gitlab CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-22

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • gitlab

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Peaked 1d ago at 2 mentions (2026-09-11); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
gitlab
Products
gitlab

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-11: 2Mentions · 2026-10-07: 1Active Exploitation · 2026-10-07: 1Patch / Workaround · 2026-09-11: 2Technical Details · 2026-09-11: 2Technical Details · 2026-10-07: 109-1110-07
Signal classification2 categories
Patch
266.7%
Active Exploitation
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-112
Patch2
2026-10-071
Active Exploitation1
Full discourse3 posts
  • DailyCVE@dailycve
    Active Exploitation

    🔴 CISA KEV Catalog API Integration, Unauthenticated Remote Information Disclosure, #CVE-2023-2825 (Critical) -DC-Oct2026-2812 https://dailycve.com/cisa-kev-catalog-api-integration-unauthenticated-remote-information-disclosure-cve-2023-2825-critical-dc-oct2026-2812/

    Post summary

    The tweet reports that CVE‑2023‑2825, a critical unauthenticated remote information disclosure flaw, is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, indicating it is actively exploited in the wild. This underscores the urgency of applying immediate mitigations or patches.

    0000032
    241 followersView on X
  • Foundry Daily@FoundryDaily
    Patch

    📰 GitLab is urging users to immediately patch a maximum-severity path traversal vulnerability, CVE-2023-2825. This critical flaw could allow unauthorized access to sensitive files on affected servers. https://t.co/6GNMmVVWe6

    Post summary

    GitLab issues an urgent patch advisory for CVE‑2023‑2825, a path traversal flaw that could expose sensitive files if not remedied.

    0000040
    23 followersView on X
  • Trube Technologies@trubetech
    Patch

    GitLab urges users to patch a max-severity path traversal flaw (CVE-2023-2825). Learn why urgent remediation matters and how to apply the fix. Read more: https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/

    Post summary

    GitLab warns that CVE‑2023‑2825 is a critical path traversal vulnerability and urges users to apply the patch promptly.

    0000047
    99 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appgitlabgitlab16.0.0--
Appgitlabgitlab16.0.0--

Explore more

Back to dashboardgitlab CVEsgitlab vulnerabilities