GitLab urges users to patch max severity path traversal flaw
GitLab urges self-managed users to immediately patch a maximum-severity path traversal flaw (CVE-2023-2825) enabling unauthenticated arbitrary file reads.
GitLab released patches in CE/EE versions 19.3.2, 19.2.6, and 19.1 for CVE-2023-2825, a maximum-severity path traversal vulnerability that lets unauthenticated attackers read arbitrary files from vulnerable servers under certain conditions. The flaw, reported by researcher s3ntago via HackerOne, stems from improper path confinement and missing authentication enforcement in the repository commits API. GitLab also patched CVE-2026-87719, an insecure deserialization flaw in the GraphQL subscription serializer affecting Enterprise Edition users with Duo Chat access, which could expose credentials and Advanced Search configurations. GitLab.com and Dedicated customers are already protected; the platform has over 30 million registered users and is used by more than 50% of Fortune 100 companies.
- CVE-2023-2825 is a maximum-severity path traversal flaw allowing unauthenticated arbitrary file reads under certain conditions.
- Discovered by researcher s3ntago via HackerOne; caused by improper path confinement in the repository commits API.
- GitLab also fixed CVE-2026-87719, an insecure deserialization flaw letting Duo Chat users steal credentials.
- Fixes shipped in CE/EE versions 19.3.2, 19.2.6, and 19.1; GitLab.com and Dedicated already protected.
- CISA has flagged four GitLab vulnerabilities as exploited since 2021, including two flagged in February.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-22175 | Unauthenticated SSRF in GitLab via Internal-Network Webhook Requests (CVE-2021-22175) | 9.8 | 53% | KEVPoC | KEV |
| CVE-2021-39935 | Server-Side Request Forgery in GitLab Community and Enterprise Editions via CI Lint API | 7.5 | 36% | KEV | KEV |
| CVE-2023-2825 | An issue has been discovered in GitLab CE/EE affecting only version 16.0.0 | 7.5 | 72% | ||
| CVE-2026-87719 | Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE | 9.9 | — |
From the original article
2 min read at bleepingcomputer.com
GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2023-2825. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.