Read the docs

Squareup

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Squareup records in CISA KEV

No Squareup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Okhttp 3 records LOW Git-fastclone 2 records MEDIUM Retrofit 2 records MEDIUM Connect Java Software Development Kit 1 record LOW Okhttp-brotli 1 record MEDIUM Okhttp3 1 record LOW Okio 1 record LOW Squalor 1 record MEDIUM

Records

2 records in Retrofit · all components

TI-2018-16066 CVE-2018-1000844 · GHSA-j379-9jr9-w5cq

Square Open Source Retrofit version Prior to commit…

Priority MEDIUM 43

Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02152 Published 2018-12-20 Fixed in 2.5.0 CWE-611
TI-2018-16071 CVE-2018-1000850 · GHSA-8p8g-f9vg-r7xr

Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a…

Priority MEDIUM 40

Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an atta…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04033 Published 2018-12-20 Fixed in 2.5.0 CWE-22
Open these records in search →