GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab disclosed a critical CVSS 10.0 path traversal vulnerability in its repository commits API allowing unauthenticated file-read access, with active in-the-wild probes detected hours after public disclosure. Multiple GitLab CE and EE versions are affected, and the vulnerability enables attackers to extract sensitive configuration files and credentials.

This Wire brief sits within Fusion42's coverage of Cybersecurity and Developer Tools, and 2 sources have reported it.