Not rated
CVE-2020-7650 All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read
Description
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| snyk-broker | Versions not published |
References
- updates.snyk.io updates.snyk.io
- snyk.io snyk.io
Timeline
- Published
- Last modified
Other CVEs of snyk-broker
The 7 CVEs of snyk-broker →
CVE-2020-7649
This affects the package snyk-broker before 4.73.0
4.9
Medium
CVE-2020-7654
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure
Not rated
CVE-2020-7648
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read
Not rated
CVE-2020-7651
All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read
Not rated