Description (CNA)
All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / snyk-broker | affected all versions before 4.79.0 |
CWE
No CWE identifiers supplied.
References
- https://updates.snyk.io/snyk-broker-security-fixes-152338
- https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570610
ADP enrichment
No English description supplied.