Not rated
CVE-2020-7651 All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read
Description
All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| snyk-broker | Versions not published |
References
- updates.snyk.io updates.snyk.io
- snyk.io snyk.io
Timeline
- Published
- Last modified
Other CVEs of snyk-broker
The 7 CVEs of snyk-broker →
CVE-2020-7649
This affects the package snyk-broker before 4.73.0
4.9
Medium
CVE-2020-7650
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read
Not rated
CVE-2020-7654
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure
Not rated
CVE-2020-7648
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read
Not rated