Unauthenticated arbitrary file read
Named by 2 kept items in this workspace.
Search every workspace for Unauthenticated arbitrary file read. It matches the name as written, so it can find other things that share it.
The items that name it 2
Remote, unauthenticated attackers access specific files in the web application's root directory; requires prior knowledge of the exact file name and path; cannot list directory contents
Exploiting GitLab's commits and files APIs without authentication to read local files (CVE-2026-85706)
All techniques in this workspace.