SecurityBleepingComputerabout 2 hours ago
GitLab Patches Maximum Severity Path Traversal Flaw
1 min read
GitLab patched a maximum-severity path traversal flaw, CVE-2023-2825, that lets unauthenticated attackers read arbitrary files from vulnerable servers. The fix ships in GitLab CE and EE versions 19.3.2, 19.2.6, and 19.1, alongside a second critical GraphQL deserialization flaw, CVE-2026-87719.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
