CVE-2020-7653

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read

published May 29, 2020

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01130 · 66.1th percentile
Published
2020-05-29T20:40Z
EPSS history
Timeline
  • 29 MAY 20:40Z
    All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read
    cvelistv5