deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13245
Published: 2020-05-28
Description: Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400, RAX120, R6400v2, RBR20, R6800, XR300, R6850, XR500, and R7000P.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://iot-lab-fh-ooe.github.io/netgear_update_vulnerability/; https://www.netgear.com/about/security/; https://iot-lab-fh-ooe.github.io/netgear_update_vulnerability/
CVE: CVE-2020-13660
Published: 2020-05-28
Description: CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12312; https://www.youtube.com/watch?v=Q6RMhmpScho; http://dev.cmsmadesimple.org/bug/view/12312
CVE: CVE-2020-5357
Published: 2020-05-28
Description: Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability. The vulnerability is limited to the Dell Dock Firmware Update Utilities during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.
CVSS Score: 7.1 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.dell.com/support/article/SLN321564; https://www.dell.com/support/article/SLN321564
CVE: CVE-2019-6342
Published: 2020-05-28
Description: An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.
CVSS Score: 9.8 (CRITICAL)
References: https://www.drupal.org/sa-core-2019-008; https://www.drupal.org/sa-core-2019-008
CVE: CVE-2020-11082
Published: 2020-05-28
Description: In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/github/advisory-review/pull/1020; https://github.com/kaminari/kaminari/commit/8dd52a1aed3d2fa2835d836de23fc0d8c4ff5db8; https://github.com/kaminari/kaminari/security/advisories/GHSA-r5jw-62xg-j433
CVE: CVE-2020-13173
Published: 2020-05-28
Description: Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://advisory.teradici.com/security-advisories/55/; https://advisory.teradici.com/security-advisories/55/
CVE: CVE-2020-13693
Published: 2020-05-29
Description: An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html; https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/; https://codex.bbpress.org/releases/
CVE: CVE-2020-5572
Published: 2020-05-29
Description: Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: https://jvn.jp/en/jp/JVN78745667/index.html; https://kb.cybozu.support/article/36411/; https://jvn.jp/en/jp/JVN78745667/index.html
CVE: CVE-2020-5573
Published: 2020-05-29
Description: Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: https://jvn.jp/en/jp/JVN78745667/index.html; https://kb.cybozu.support/article/36211/; https://jvn.jp/en/jp/JVN78745667/index.html
CVE: CVE-2020-4306
Published: 2020-05-29
Description: IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176735.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/176735; https://www.ibm.com/support/pages/node/6213263; https://exchange.xforce.ibmcloud.com/vulnerabilities/176735
CVE: CVE-2020-4352
Published: 2020-05-29
Description: IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427.
CVSS Score: 7.0 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178427; https://www.ibm.com/support/pages/node/6217600; https://exchange.xforce.ibmcloud.com/vulnerabilities/178427
CVE: CVE-2020-4490
Published: 2020-05-29
Description: IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989
CVSS Score: 6.1 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181989; https://www.ibm.com/support/pages/node/6217550; https://exchange.xforce.ibmcloud.com/vulnerabilities/181989
CVE: CVE-2020-11017
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415, CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q5c8-fm29-q57c; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-12675
Published: 2020-05-29
Description: The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blog.alertlogic.com/alert-logic-threat-research-team-identifies-new-vulnerability-cve-2020-12675-in-mappress-plugin-for-wordpress/; https://wordpress.org/plugins/mappress-google-maps-for-wordpress/#developers; https://blog.alertlogic.com/alert-logic-threat-research-team-identifies-new-vulnerability-cve-2020-12675-in-mappress-plugin-for-wordpress/
CVE: CVE-2020-11018
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8cvc-vcw7-6mfw; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-13634
Published: 2020-05-29
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xF1002558
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.youhua.com; https://github.com/y5s5k5/CVE-2020-13634; http://www.youhua.com
CVE: CVE-2020-12493
Published: 2020-05-29
Description: An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284
References: https://cert.vde.com/de-de/advisories/vde-2020-016; https://cert.vde.com/de-de/advisories/vde-2020-016
CVE: CVE-2020-11019
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wvrr-2f4r-hjvh; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-11038
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-680, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h25x-cqr6-fp6g; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-11039
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mx9p-f6q8-mqwq; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-11041
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.
CVSS Score: 2.2 (LOW)
CWE: CWE-129, CWE-129
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w67c-26c4-2h9w; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-1798
Published: 2020-05-29
Description: HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone. Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-02-smartphone-en
CVE: CVE-2020-8816
Published: 2020-05-29
Description: Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/157861/Pi-Hole-4.3.2-DHCP-MAC-OS-Command-Execution.html; http://packetstormsecurity.com/files/158737/Pi-hole-4.3.2-Remote-Code-Execution.html; https://github.com/pi-hole/AdminLTE/commits/master
CVE: CVE-2020-11040
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.
CVSS Score: 2.2 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x4wq-m7c9-rjgr; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-11043
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched in 2.1.0.
CVSS Score: 2.2 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5mr4-28w3-rc84; https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html
CVE: CVE-2020-11085
Published: 2020-05-29
Description: In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.
CVSS Score: 2.6 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/b73143cf7ee5fe4cdabcbf56908aa15d8a883821; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2j4w-v45m-95hf
CVE: CVE-2020-11086
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_ntlm_v2_client_challenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0.
CVSS Score: 3.1 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/c098f21fdaadca57ff649eee1674f6cc321a2ec4; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fg8v-w34r-c974
CVE: CVE-2020-11087
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_AuthenticateMessage. This has been fixed in 2.1.0.
CVSS Score: 3.1 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/8241ab42fdf0cc89cf69fc574bf6360c9977a0d4; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-84vj-g73m-chw7
CVE: CVE-2020-11088
Published: 2020-05-29
Description: In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.
CVSS Score: 3.1 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/8fa38359634a9910b91719818ab02f23c320dbae; https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xh4f-fh87-43hp
CVE: CVE-2020-11089
Published: 2020-05-29
Description: In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.
CVSS Score: 3.7 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/6b485b146a1b9d6ce72dfd7b5f36456c166e7a16; https://github.com/FreeRDP/FreeRDP/commit/795842f4096501fcefc1a7f535ccc8132feb31d7
CVE: CVE-2020-1797
Published: 2020-05-29
Description: HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function.
CVSS Score: 2.4 (LOW)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-03-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-03-smartphone-en
CVE: CVE-2020-1809
Published: 2020-05-29
Description: HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voice operation, successful exploit could allow the attacker read certain files without unlock the phone leading to information disclosure.
CVSS Score: 4.6 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-smartphone-en
CVE: CVE-2020-1832
Published: 2020-05-29
Description: E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in the adjacent network could send a crafted message, successful exploit could lead to stack buffer overflow which may cause malicious code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-stack-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-stack-en
CVE: CVE-2020-1833
Published: 2020-05-29
Description: Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone.
CVSS Score: 2.4 (LOW)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-05-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-05-smartphone-en
CVE: CVE-2020-1870
Published: 2020-05-29
Description: There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-en
CVE: CVE-2020-3957
Published: 2020-05-29
Description: VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://www.vmware.com/security/advisories/VMSA-2020-0011.html; https://www.vmware.com/security/advisories/VMSA-2020-0011.html
CVE: CVE-2020-3958
Published: 2020-05-29
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with non-administrative access to a virtual machine to crash the virtual machine's vmx process leading to a denial of service condition.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0957; https://www.vmware.com/security/advisories/VMSA-2020-0011.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0957
CVE: CVE-2020-3959
Published: 2020-05-29
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-401
References: https://www.vmware.com/security/advisories/VMSA-2020-0011.html; https://www.vmware.com/security/advisories/VMSA-2020-0011.html
CVE: CVE-2020-1831
Published: 2020-05-29
Description: HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance function after a series of operations with a PC.
CVSS Score: 2.4 (LOW)
CWE: CWE-863
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-04-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-04-smartphone-en
CVE: CVE-2020-7651
Published: 2020-05-29
Description: All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570610; https://updates.snyk.io/snyk-broker-security-fixes-152338; https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570610
CVE: CVE-2020-7652
Published: 2020-05-29
Description: All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570611; https://updates.snyk.io/snyk-broker-security-fixes-152338; https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570611
CVE: CVE-2020-7653
Published: 2020-05-29
Description: All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-59
References: https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570612; https://updates.snyk.io/snyk-broker-security-fixes-152338; https://snyk.io/vuln/SNYK-JS-SNYKBROKER-570612