VulnIntel

CVE-2023-2825

CVSS 10.0 · CRITICAL
EPSS p99
Higher than 99% of all CVEs — imminent exploitation likely.
No patch reference
No patch/mitigation in references

Published 5/26/2023 · updated 6/17/2026 · CWE-22

Share
Get asset-aware triage

Summary

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.

CVSS 10.0 — CRITICAL

10.0 / 10
  • AV: Network
  • AC: Low complexity
  • PR: No privileges
  • UI: No user interaction
  • S: Scope changed
  • C: Confidentiality: High
  • I: Integrity: High
  • A: Availability: None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS exploitation probability

71.6%

Percentile p99 — Higher than 99% of all CVEs — imminent exploitation likely.

Affected products

1 vendor/product entries
  • Gitlab Gitlabv16.0.0
Do you run any of these? Sign in to match this CVE against your SBOM and asset inventory automatically.

Timeline

  1. May 26, 2023 · Disclosed / published in NVD
  2. Jun 17, 2026 · Intel last updated

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

  • NVD· 13 days ago
  • CVE.org· 13 days ago
  • FIRST EPSS· 13 days ago
  • CISA KEV· no data
  • OSV· 13 days ago

References

Vendor & CERT advisories4
Other2

Unlock the full report

See how CVE-2023-2825 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

  • · Asset-aware CVSS & priority
  • · Grounded AI analysis (A–D graded)
  • · Auto-generated WAF / IPS rules
  • · Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.