Описание
Arbitrary File Read in Snyk Broker
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.
Пакеты
Наименование
snyk-broker
npm
Затронутые версииВерсия исправления
< 4.80.0
4.80.0
Связанные уязвимости
CVSS3: 6.5
nvd
больше 5 лет назад
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.