CVE-2020-7650

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read

published May 29, 2020

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01130 · 66.1th percentile
Published
2020-05-29T21:11Z
EPSS history
Timeline
  • 29 MAY 21:11Z
    All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read
    cvelistv5