CVE-2017-7675: Path Traversal

August 11, 2017 (updated June 12, 2019)

The HTTP/2 implementation in Tomcat bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

References

www.securityfocus.com/bid/100256
nvd.nist.gov/vuln/detail/CVE-2017-7675

Code Behaviors & Features

Detect and mitigate CVE-2017-7675 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →