Vulnerabilities

TI-2020-06171 CVE-2020-7650 · GHSA-2fmp-7xwf-wvwr

Path traversal in snyk-broker

LOW 31

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0113 Published 2020-05-29 Fixed in 4.73.1 CWE-22

TI-2020-06175 CVE-2020-7654 · GHSA-mgh5-4h95-qj4p

LOW 35

All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01122 Published 2020-05-29 Fixed in 4.73.1 CWE-532

TI-2020-06169 CVE-2020-7648 · GHSA-9xv2-548x-5h79

LOW 31

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0113 Published 2020-05-29 Fixed in 4.72.2 CWE-22

TI-2020-06172 CVE-2020-7651 · GHSA-45hw-29x7-9x95

LOW 22

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01115 Published 2020-05-29 Fixed in 4.79.0 CWE-22

TI-2020-06173 CVE-2020-7652 · GHSA-x7m2-6g99-84w5

LOW 32

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01685 Published 2020-05-29 Fixed in 4.80.0 CWE-22

TI-2020-06174 CVE-2020-7653 · GHSA-4vj3-f849-5r48

LOW 31

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0113 Published 2020-05-29 Fixed in 4.80.0 CWE-59