CVE-2018-1000850: Directory Traversal vulnerability in Square Retrofit
Summary
CVE-2018-1000850: Directory Traversal vulnerability in Square Retrofit. Affects com.squareup.retrofit2:retrofit versions >= 2.0.0, < 2.5.0. Fixed in 2.5.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Square Retrofit is a popular library for creating HTTP clients in Android and Java applications. It provides a simple and efficient way to make network requests and handle responses. The vulnerability affects versions 2.0 to 2.5.0 (excluding 2.5.0) of the library. Retrofit's RequestBuilder class, specifically the addPathParameter method, is vulnerable to a Directory Traversal attack. This vulnerability allows an attacker to manipulate the URL and gain unauthorized access to resources that are otherwise unavailable. The attack can be executed by sending a specially crafted encoded path parameter in a POST, PUT, or DELETE request. The vulnerability has been assigned a CVSS score of 7.5, indicating a high severity level.
Vulnerability Detail
The Directory Traversal vulnerability in Square Retrofit allows an attacker to bypass access controls and gain unauthorized access to resources on the server. By manipulating the URL, the attacker can add or delete resources that should not be accessible to them. This can lead to various security issues, such as unauthorized data access, data manipulation, or even server compromise. The vulnerability has been fixed in version 2.5.0 and later of Square Retrofit.
How To Fix
Minimum fixed version
2.5.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is strongly advised to upgrade to the fixed version of Square Retrofit as soon as possible.
Conclusion
The Directory Traversal vulnerability in Square Retrofit can lead to unauthorized access to server resources and other security issues. It is crucial to upgrade to version 2.5.0 or later of Square Retrofit to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for com.squareup.retrofit2:retrofit →
FAQ
Square Retrofit is a library for creating HTTP clients in Android and Java applications. It simplifies the process of making network requests and handling responses.
Versions 2.0 to 2.5.0 (excluding 2.5.0) of Square Retrofit are affected by this vulnerability.
An attacker can exploit this vulnerability by sending a specially crafted encoded path parameter in a POST, PUT, or DELETE request. By manipulating the URL, the attacker can gain unauthorized access to resources on the server.
Yes, the vulnerability has been fixed in version 2.5.0 and later of Square Retrofit.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for com.squareup.retrofit2:retrofit.
