Arbitrary File Read in Snyk Broker

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-7652 · ADVISORY
• snyk/broker · PACKAGE
• snyk.io/vuln/SNYK-JS-SNYKBROKER-570611 · WEB
• updates.snyk.io/snyk-broker-security-fixes-152338 · WEB

broker의 다른 취약점

• CVE-2020-7654높음 7.5All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.
• CVE-2020-7650보통 6.5All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads t…
• CVE-2020-7648보통 6.5All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to…
• CVE-2020-7653보통 6.5All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Sny…
• CVE-2020-7651보통 4.3All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to S…