Arbitrary File Read in Snyk Broker

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-7653 · ADVISORY
• snyk.io/vuln/SNYK-JS-SNYKBROKER-570612 · WEB
• updates.snyk.io/snyk-broker-security-fixes-152338 · WEB

broker のその他の脆弱性

• CVE-2020-7654高 7.5All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.
• CVE-2020-7650中 6.5All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads t…
• CVE-2020-7648中 6.5All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to…
• CVE-2020-7652中 6.5All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Sny…
• CVE-2020-7651中 4.3All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to S…