CVE-2023-2825

GitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.

CVE-2023-2825 - GitLab CE/EE 1600 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 1601 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 1600 The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug It was discovered by pw

On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug.

CVE-2023-2825 On May 23, 2023 GitLab released version 1601 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 1600 The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug

the proof of concept written in Python for an unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups. This is a critical severity issue

CVE-2023-2825 On May 23, 2023 GitLab released version 1601 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 1600 The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug It was discovered by pwnie on HackerOne through the bug bounty program At the time