Non notée
CVE-2020-7653 All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read
Description
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| snyk-broker | Versions non publiées |
Références
- snyk.io snyk.io
- updates.snyk.io updates.snyk.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de snyk-broker
Les 7 CVE de snyk-broker →
CVE-2020-7649
This affects the package snyk-broker before 4.73.0
4.9
Moyenne
CVE-2020-7650
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read
Non notée
CVE-2020-7654
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure
Non notée
CVE-2020-7648
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read
Non notée