CVE-2014-7816: Information disclosure via directory traversal

December 1, 2014 (updated March 4, 2015)

Directory traversal vulnerability in this package when running on Windows, allows remote attackers to read arbitrary files via a .. in a resource URI.

References

bugzilla.redhat.com/CVE-2014-7816

Detect and mitigate CVE-2014-7816 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →