Not rated
CVE-2020-7653 All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read
Description
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| snyk-broker | Versions not published |
References
- snyk.io snyk.io
- updates.snyk.io updates.snyk.io
Timeline
- Published
- Last modified
Other CVEs of snyk-broker
The 7 CVEs of snyk-broker →
CVE-2020-7649
This affects the package snyk-broker before 4.73.0
4.9
Medium
CVE-2020-7650
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read
Not rated
CVE-2020-7654
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure
Not rated
CVE-2020-7648
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read
Not rated