CVE-2023-2825 is a path traversal vulnerability that enables an unauthenticated user to read arbitrary files on the server.
gitlab
With a high CVSS score of 9.6, the CVE-2023-2478 vulnerability poses a serious risk to the integrity and security of GitLab projects.
Tracked as CVE-2022-41903 (CVSS 9.9/10 severity), the security flaw can be exploited by sending specially-crafted input.
Tracked as CVE-2022-2992 (CVSS 9.9/10 severity), the security flaw can be exploited via the Import from GitHub API endpoint
GitLab issued a security notice to fix a flaw (CVE-2022-2884) in the Community Edition and Enterprise Edition, with a CVSS score of 9.9.
GitLab issued a security notice to fix an account takeover flaw (CVE-2022-1680) in the Gitlab Enterprise Edition, with a CVSS score of 9.9
GitLab issued a security notice to fix a vulnerability (CVE-2022-1162) in the Community Edition and Enterprise Edition, with a CVSS score of 9.1