GMS-2018-18: Path Traversal

February 17, 2018

Public has a path traversal vulnerability. It allows an attacker to read content of arbitrary files on the server.

References

github.com/tnantoka/public/commit/eae8ad8017b260f8667ded5e12801bd72b877af2
hackerone.com/reports/312918

Code Behaviors & Features

Detect and mitigate GMS-2018-18 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →