CVE-2020-8131CWE-22

Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code…

published February 24, 2020

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install a malicious package.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05159 · 92.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2020-02-24T14:41Z
EPSS history
Timeline
  • 24 FEB 14:41Z
    Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code…
    cvelistv5