CVE-2020-7651

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read

published May 29, 2020

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01115 · 65.8th percentile
Published
2020-05-29T20:53Z
EPSS history
Timeline
  • 29 MAY 20:53Z
    All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read
    cvelistv5