CVE-2019-15596: Path Traversal

December 18, 2019 (updated December 27, 2019)

A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory.

References

hackerone.com/reports/695416
nvd.nist.gov/vuln/detail/CVE-2019-15596

Code Behaviors & Features

Detect and mitigate CVE-2019-15596 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →