CVE-2017-16029: Path Traversal

June 4, 2018 (updated October 9, 2019)

hostr allows an attacker to read files outside the current directory by sending ../ in the url path for GET requests.

References

github.com/henrytseng/hostr/issues/8
nvd.nist.gov/vuln/detail/CVE-2017-16029

Code Behaviors & Features

Detect and mitigate CVE-2017-16029 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →