Количество 5
Количество 5
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused ...
GHSA-5xf4-f2fq-f69j
Yarn Improper link resolution before file access (Link Following)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set. | CVSS3: 7.8 | 2% Низкий | больше 6 лет назад |
 | CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set. | CVSS3: 7.8 | 2% Низкий | больше 6 лет назад |
 | CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set. | CVSS3: 7.8 | 2% Низкий | больше 6 лет назад |
| CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused ... | CVSS3: 7.8 | 2% Низкий | больше 6 лет назад |
| GHSA-5xf4-f2fq-f69j Yarn Improper link resolution before file access (Link Following) | CVSS3: 7.8 | 2% Низкий | больше 6 лет назад |
Уязвимостей на страницу