Directory Traversal vulnerability in Square Retrofit

Square Retrofit versions from including 2.0 to 2.5.0 excluding contain a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter. By manipulating the URL an attacker could add or delete resources otherwise unavailable to her. This attack appears to be exploitable via an...

Directory Traversal

Retrofit is vulnerable to directory traversal. The vulnerability exists when using encoded=true in the function addPathParameter in RequestBuilder.java, which would allow an attacker to add or delete resources which are otherwise not available from the application...

Directory traversal

Square Retrofit version versions from including 2.0 and 2.5.0 excluding contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack...

CVE-2018-1000850

Square Retrofit version versions from including 2.0 and 2.5.0 excluding contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack...

PT-2018-9574

Name of the Vulnerable Software and Affected Versions Square Retrofit versions 2.0 through 2.4.x Description The issue allows an attacker to manipulate the URL, potentially adding or deleting resources that would otherwise be unavailable. This can be exploited via an encoded path parameter on POS...

CVE-2018-1000850: Improper Limitation of a Pathname to a Restricted Directory

Square Retrofit version versions from including 2.0 and 2.5.0 excluding contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack...