Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:00:57 +0000 CVE-2023-3385 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab https://cve.radiocsirt.org/vuln/cve-2023-3385 <p><strong>Affected:</strong> GitLab</p> <p>An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project &#39;from export&#39; could access and read unrelated files via uploading a specially crafted file. This was due to a bug in `tar`, fixed in [`tar-1.35`](https://lists.gnu.org/archive/html/info-gnu/2023-07/msg00005.html).</p> <p><strong>Affected:</strong> GitLab</p> <p>An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project &#39;from export&#39; could access and read unrelated files via uploading a specially crafted file. This was due to a bug in `tar`, fixed in [`tar-1.35`](https://lists.gnu.org/archive/html/info-gnu/2023-07/msg00005.html).</p> https://cve.radiocsirt.org/vuln/cve-2023-3385