CVE-2020-7651

—

CVSS 3.1

4.3 medium

EPSS

1%p64

Published

May 29, 2020 (May 29, 2020)

Modified

Jun 17, 2026

Description

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.

Vendors: synk
Products: broker
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.