Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.9epss 3.8%
from disclosure to weapon409 days
Published on NVDJan 26
1st PoC+409d
exploitation probability
3.8%top 11% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
GitLab · GitLabpublic PoCs found — 1
githubgithub.com/doyensec/malicious-devfile-registry★ 15⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.