GitLab addresses critical vulnerabilities in software editions

GitLab has released patches to address several security vulnerabilities affecting its Community Edition (CE) and Enterprise Edition (EE). A primary concern involves a critical vulnerability with a CVSS score of 10.0.

One identified flaw, CVE-2023-2825, is a path traversal bug that allows unauthenticated users to read arbitrary files on the server. This exploit is particularly effective when a project is nested within at least five groups, as researchers found a correlation between the number of groups and the depth of directory traversal possible.

Another critical issue involves an integer overflow during the processing of specially prepared regular expressions, which could allow an unauthenticated attacker to execute arbitrary code on the server under certain conditions.

GitLab advises administrators of self-managed installations to upgrade immediately to the patched versions. While GitLab.com is already running on patched versions, users of self-managed environments must apply the updates to mitigate risks including path traversal, arbitrary code execution, and potential LDAP account takeovers.