GitLab Repository Commits API Path Traversal Probing

Arnold Chan@slaz

•updated Sep 11, 2026•0•0•1

Detects HTTP GET requests to the GitLab project repository commits API that contain path traversal sequences ('../' or encoded variations). This behavior is characteristic of exploitation attempts targeting vulnerabilities that allow unauthorized file access or directory traversal within the GitLab environment.