Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Squareup Component: Retrofit Clear all filters
TI-2018-16071 CVE-2018-1000850 · GHSA-8p8g-f9vg-r7xr

Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a…

Priority MEDIUM 40

Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an atta…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04033 Published 2018-12-20 Fixed in 2.5.0 CWE-22
TI-2018-16066 CVE-2018-1000844 · GHSA-j379-9jr9-w5cq

Square Open Source Retrofit version Prior to commit…

Priority MEDIUM 43

Square Open Source Retrofit version Prior to commit 4a693c5aeeef2be6c7ecf80e7b5ec79f6ab59437 contains a XML External Entity (XXE) vulnerability in JAXB that can result in An attacker could use this to remotely read files…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02152 Published 2018-12-20 Fixed in 2.5.0 CWE-611