An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.
| Software | From | Fixed in |
|---|---|---|
| gitlab / gitlab | 14.5 | 14.5.3.x |
| gitlab / gitlab | 14.6 | 14.6.2.x |