vulnerability
FreeBSD: VID-10968dfd-a687-11e6-b2d3-60a44ce6887b (CVE-2016-9086): gitlab -- Directory traversal via "import/export" feature
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Nov 9, 2016 | Nov 14, 2016 | Dec 10, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Nov 9, 2016
Added
Nov 14, 2016
Modified
Dec 10, 2025
Description
GitLab reports: The import/export feature did not properly check for symbolic links in user-provided archives and therefore it was possible for an authenticated user to retrieve the contents of any file accessible to the GitLab service account. This included sensitive files such as those that contain secret tokens used by the GitLab service to authenticate users.
Solution
freebsd-upgrade-package-gitlab
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.