CVE-2020-7653

2020-05-2920:40:22

snyk

www.cve.org

EPSS

0.001

Percentile

28.4%

JSON

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk’s internal network by creating symlinks to match whitelisted paths.

CNA Affected

[
  {
    "product": "snyk-broker",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions before 4.80.0"
      }
    ]
  }
]

References

snyk.io/vuln/SNYK-JS-SNYKBROKER-570612

updates.snyk.io/snyk-broker-security-fixes-152338

EPSS

0.001

Percentile

28.4%

JSON

Related for CVELIST:CVE-2020-7653