GMS-2016-93: Directory Traversal

December 11, 2016

There is a directory traversal vulnerability that allows an attacker to read files outside the current directory by sending ../ in the url path for GET requests.

References

github.com/henrytseng/hostr/commit/789a00047459fd80b6f0a9701a1378a47fb73ba8
github.com/henrytseng/hostr/issues/8

Code Behaviors & Features

Detect and mitigate GMS-2016-93 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →