CVE-2020-7652

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read

published May 29, 2020

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01685 · 76.8th percentile
Published
2020-05-29T20:46Z
EPSS history
Timeline
  • 29 MAY 20:46Z
    All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read
    cvelistv5