VULNERABILITY INTELLIGENCE

CVE-2020-7653

CVSS score6.5 MEDIUM
EPSS probability1.13%
CISA KEVNot currently listed
Published2020-05-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references