Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-7651

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.3%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
Products affected by CVE-2020-7651
  • Synk » Broker » Version: 1.0.0
    cpe:2.3:a:synk:broker:1.0.0
  • Synk » Broker » Version: 1.1.0
    cpe:2.3:a:synk:broker:1.1.0
  • Synk » Broker » Version: 2.0.0
    cpe:2.3:a:synk:broker:2.0.0
  • Synk » Broker » Version: 2.0.1
    cpe:2.3:a:synk:broker:2.0.1
  • Synk » Broker » Version: 2.1.0
    cpe:2.3:a:synk:broker:2.1.0
  • Synk » Broker » Version: 2.1.1
    cpe:2.3:a:synk:broker:2.1.1
  • Synk » Broker » Version: 2.2.0
    cpe:2.3:a:synk:broker:2.2.0
  • Synk » Broker » Version: 2.3.0
    cpe:2.3:a:synk:broker:2.3.0
  • Synk » Broker » Version: 2.4.0
    cpe:2.3:a:synk:broker:2.4.0
  • Synk » Broker » Version: 2.4.1
    cpe:2.3:a:synk:broker:2.4.1
  • Synk » Broker » Version: 2.5.0
    cpe:2.3:a:synk:broker:2.5.0
  • Synk » Broker » Version: 2.6.0
    cpe:2.3:a:synk:broker:2.6.0
  • Synk » Broker » Version: 2.6.1
    cpe:2.3:a:synk:broker:2.6.1
  • Synk » Broker » Version: 2.7.0
    cpe:2.3:a:synk:broker:2.7.0
  • Synk » Broker » Version: 2.8.0
    cpe:2.3:a:synk:broker:2.8.0
  • Synk » Broker » Version: 3.0.0
    cpe:2.3:a:synk:broker:3.0.0
  • Synk » Broker » Version: 3.0.1
    cpe:2.3:a:synk:broker:3.0.1
  • Synk » Broker » Version: 3.1.0
    cpe:2.3:a:synk:broker:3.1.0
  • Synk » Broker » Version: 3.1.1
    cpe:2.3:a:synk:broker:3.1.1
  • Synk » Broker » Version: 3.1.2
    cpe:2.3:a:synk:broker:3.1.2
  • Synk » Broker » Version: 3.10.0
    cpe:2.3:a:synk:broker:3.10.0
  • Synk » Broker » Version: 3.10.1
    cpe:2.3:a:synk:broker:3.10.1
  • Synk » Broker » Version: 3.10.2
    cpe:2.3:a:synk:broker:3.10.2
  • Synk » Broker » Version: 3.11.0
    cpe:2.3:a:synk:broker:3.11.0
  • Synk » Broker » Version: 3.11.1
    cpe:2.3:a:synk:broker:3.11.1
  • Synk » Broker » Version: 3.2.0
    cpe:2.3:a:synk:broker:3.2.0
  • Synk » Broker » Version: 3.3.0
    cpe:2.3:a:synk:broker:3.3.0
  • Synk » Broker » Version: 3.3.1
    cpe:2.3:a:synk:broker:3.3.1
  • Synk » Broker » Version: 3.3.2
    cpe:2.3:a:synk:broker:3.3.2
  • Synk » Broker » Version: 3.4.0
    cpe:2.3:a:synk:broker:3.4.0
  • Synk » Broker » Version: 3.5.0
    cpe:2.3:a:synk:broker:3.5.0
  • Synk » Broker » Version: 3.6.0
    cpe:2.3:a:synk:broker:3.6.0
  • Synk » Broker » Version: 3.6.1
    cpe:2.3:a:synk:broker:3.6.1
  • Synk » Broker » Version: 3.7.0
    cpe:2.3:a:synk:broker:3.7.0
  • Synk » Broker » Version: 3.7.1
    cpe:2.3:a:synk:broker:3.7.1
  • Synk » Broker » Version: 3.7.2
    cpe:2.3:a:synk:broker:3.7.2
  • Synk » Broker » Version: 3.8.0
    cpe:2.3:a:synk:broker:3.8.0
  • Synk » Broker » Version: 3.9.0
    cpe:2.3:a:synk:broker:3.9.0
  • Synk » Broker » Version: 3.9.1
    cpe:2.3:a:synk:broker:3.9.1
  • Synk » Broker » Version: 4.10.0
    cpe:2.3:a:synk:broker:4.10.0
  • Synk » Broker » Version: 4.10.1
    cpe:2.3:a:synk:broker:4.10.1
  • Synk » Broker » Version: 4.10.2
    cpe:2.3:a:synk:broker:4.10.2
  • Synk » Broker » Version: 4.11.0
    cpe:2.3:a:synk:broker:4.11.0
  • Synk » Broker » Version: 4.11.1
    cpe:2.3:a:synk:broker:4.11.1
  • Synk » Broker » Version: 4.12.0
    cpe:2.3:a:synk:broker:4.12.0
  • Synk » Broker » Version: 4.13.0
    cpe:2.3:a:synk:broker:4.13.0
  • Synk » Broker » Version: 4.13.1
    cpe:2.3:a:synk:broker:4.13.1
  • Synk » Broker » Version: 4.14.0
    cpe:2.3:a:synk:broker:4.14.0
  • Synk » Broker » Version: 4.14.1
    cpe:2.3:a:synk:broker:4.14.1
  • Synk » Broker » Version: 4.14.2
    cpe:2.3:a:synk:broker:4.14.2
  • Synk » Broker » Version: 4.15.0
    cpe:2.3:a:synk:broker:4.15.0
  • Synk » Broker » Version: 4.15.1
    cpe:2.3:a:synk:broker:4.15.1
  • Synk » Broker » Version: 4.15.2
    cpe:2.3:a:synk:broker:4.15.2
  • Synk » Broker » Version: 4.16.0
    cpe:2.3:a:synk:broker:4.16.0
  • Synk » Broker » Version: 4.16.1
    cpe:2.3:a:synk:broker:4.16.1
  • Synk » Broker » Version: 4.16.2
    cpe:2.3:a:synk:broker:4.16.2
  • Synk » Broker » Version: 4.16.3
    cpe:2.3:a:synk:broker:4.16.3
  • Synk » Broker » Version: 4.17.0
    cpe:2.3:a:synk:broker:4.17.0
  • Synk » Broker » Version: 4.18.0
    cpe:2.3:a:synk:broker:4.18.0
  • Synk » Broker » Version: 4.18.1
    cpe:2.3:a:synk:broker:4.18.1
  • Synk » Broker » Version: 4.18.2
    cpe:2.3:a:synk:broker:4.18.2
  • Synk » Broker » Version: 4.18.3
    cpe:2.3:a:synk:broker:4.18.3
  • Synk » Broker » Version: 4.18.4
    cpe:2.3:a:synk:broker:4.18.4
  • Synk » Broker » Version: 4.19.0
    cpe:2.3:a:synk:broker:4.19.0
  • Synk » Broker » Version: 4.19.1
    cpe:2.3:a:synk:broker:4.19.1
  • Synk » Broker » Version: 4.2.0
    cpe:2.3:a:synk:broker:4.2.0
  • Synk » Broker » Version: 4.20.0
    cpe:2.3:a:synk:broker:4.20.0
  • Synk » Broker » Version: 4.21.0
    cpe:2.3:a:synk:broker:4.21.0
  • Synk » Broker » Version: 4.21.1
    cpe:2.3:a:synk:broker:4.21.1
  • Synk » Broker » Version: 4.22.0
    cpe:2.3:a:synk:broker:4.22.0
  • Synk » Broker » Version: 4.23.0
    cpe:2.3:a:synk:broker:4.23.0
  • Synk » Broker » Version: 4.24.0
    cpe:2.3:a:synk:broker:4.24.0
  • Synk » Broker » Version: 4.24.1
    cpe:2.3:a:synk:broker:4.24.1
  • Synk » Broker » Version: 4.25.0
    cpe:2.3:a:synk:broker:4.25.0
  • Synk » Broker » Version: 4.26.0
    cpe:2.3:a:synk:broker:4.26.0
  • Synk » Broker » Version: 4.26.1
    cpe:2.3:a:synk:broker:4.26.1
  • Synk » Broker » Version: 4.26.2
    cpe:2.3:a:synk:broker:4.26.2
  • Synk » Broker » Version: 4.27.0
    cpe:2.3:a:synk:broker:4.27.0
  • Synk » Broker » Version: 4.28.0
    cpe:2.3:a:synk:broker:4.28.0
  • Synk » Broker » Version: 4.28.1
    cpe:2.3:a:synk:broker:4.28.1
  • Synk » Broker » Version: 4.28.2
    cpe:2.3:a:synk:broker:4.28.2
  • Synk » Broker » Version: 4.28.3
    cpe:2.3:a:synk:broker:4.28.3
  • Synk » Broker » Version: 4.28.4
    cpe:2.3:a:synk:broker:4.28.4
  • Synk » Broker » Version: 4.29.0
    cpe:2.3:a:synk:broker:4.29.0
  • Synk » Broker » Version: 4.3.0
    cpe:2.3:a:synk:broker:4.3.0
  • Synk » Broker » Version: 4.3.1
    cpe:2.3:a:synk:broker:4.3.1
  • Synk » Broker » Version: 4.3.2
    cpe:2.3:a:synk:broker:4.3.2
  • Synk » Broker » Version: 4.30.0
    cpe:2.3:a:synk:broker:4.30.0
  • Synk » Broker » Version: 4.30.1
    cpe:2.3:a:synk:broker:4.30.1
  • Synk » Broker » Version: 4.30.2
    cpe:2.3:a:synk:broker:4.30.2
  • Synk » Broker » Version: 4.30.3
    cpe:2.3:a:synk:broker:4.30.3
  • Synk » Broker » Version: 4.31.0
    cpe:2.3:a:synk:broker:4.31.0
  • Synk » Broker » Version: 4.31.1
    cpe:2.3:a:synk:broker:4.31.1
  • Synk » Broker » Version: 4.31.2
    cpe:2.3:a:synk:broker:4.31.2
  • Synk » Broker » Version: 4.32.0
    cpe:2.3:a:synk:broker:4.32.0
  • Synk » Broker » Version: 4.33.0
    cpe:2.3:a:synk:broker:4.33.0
  • Synk » Broker » Version: 4.33.1
    cpe:2.3:a:synk:broker:4.33.1
  • Synk » Broker » Version: 4.34.0
    cpe:2.3:a:synk:broker:4.34.0
  • Synk » Broker » Version: 4.34.1
    cpe:2.3:a:synk:broker:4.34.1
  • Synk » Broker » Version: 4.35.0
    cpe:2.3:a:synk:broker:4.35.0
  • Synk » Broker » Version: 4.35.1
    cpe:2.3:a:synk:broker:4.35.1
  • Synk » Broker » Version: 4.36.0
    cpe:2.3:a:synk:broker:4.36.0
  • Synk » Broker » Version: 4.37.0
    cpe:2.3:a:synk:broker:4.37.0
  • Synk » Broker » Version: 4.38.0
    cpe:2.3:a:synk:broker:4.38.0
  • Synk » Broker » Version: 4.38.1
    cpe:2.3:a:synk:broker:4.38.1
  • Synk » Broker » Version: 4.39.0
    cpe:2.3:a:synk:broker:4.39.0
  • Synk » Broker » Version: 4.4.0
    cpe:2.3:a:synk:broker:4.4.0
  • Synk » Broker » Version: 4.4.1
    cpe:2.3:a:synk:broker:4.4.1
  • Synk » Broker » Version: 4.4.2
    cpe:2.3:a:synk:broker:4.4.2
  • Synk » Broker » Version: 4.4.3
    cpe:2.3:a:synk:broker:4.4.3
  • Synk » Broker » Version: 4.40.0
    cpe:2.3:a:synk:broker:4.40.0
  • Synk » Broker » Version: 4.41.0
    cpe:2.3:a:synk:broker:4.41.0
  • Synk » Broker » Version: 4.41.1
    cpe:2.3:a:synk:broker:4.41.1
  • Synk » Broker » Version: 4.42.0
    cpe:2.3:a:synk:broker:4.42.0
  • Synk » Broker » Version: 4.43.0
    cpe:2.3:a:synk:broker:4.43.0
  • Synk » Broker » Version: 4.44.0
    cpe:2.3:a:synk:broker:4.44.0
  • Synk » Broker » Version: 4.45.0
    cpe:2.3:a:synk:broker:4.45.0
  • Synk » Broker » Version: 4.45.1
    cpe:2.3:a:synk:broker:4.45.1
  • Synk » Broker » Version: 4.46.0
    cpe:2.3:a:synk:broker:4.46.0
  • Synk » Broker » Version: 4.47.0
    cpe:2.3:a:synk:broker:4.47.0
  • Synk » Broker » Version: 4.47.1
    cpe:2.3:a:synk:broker:4.47.1
  • Synk » Broker » Version: 4.48.0
    cpe:2.3:a:synk:broker:4.48.0
  • Synk » Broker » Version: 4.48.1
    cpe:2.3:a:synk:broker:4.48.1
  • Synk » Broker » Version: 4.48.2
    cpe:2.3:a:synk:broker:4.48.2
  • Synk » Broker » Version: 4.48.3
    cpe:2.3:a:synk:broker:4.48.3
  • Synk » Broker » Version: 4.48.4
    cpe:2.3:a:synk:broker:4.48.4
  • Synk » Broker » Version: 4.49.0
    cpe:2.3:a:synk:broker:4.49.0
  • Synk » Broker » Version: 4.49.1
    cpe:2.3:a:synk:broker:4.49.1
  • Synk » Broker » Version: 4.49.2
    cpe:2.3:a:synk:broker:4.49.2
  • Synk » Broker » Version: 4.49.3
    cpe:2.3:a:synk:broker:4.49.3
  • Synk » Broker » Version: 4.49.4
    cpe:2.3:a:synk:broker:4.49.4
  • Synk » Broker » Version: 4.5.0
    cpe:2.3:a:synk:broker:4.5.0
  • Synk » Broker » Version: 4.50.0
    cpe:2.3:a:synk:broker:4.50.0
  • Synk » Broker » Version: 4.51.0
    cpe:2.3:a:synk:broker:4.51.0
  • Synk » Broker » Version: 4.51.1
    cpe:2.3:a:synk:broker:4.51.1
  • Synk » Broker » Version: 4.52.0
    cpe:2.3:a:synk:broker:4.52.0
  • Synk » Broker » Version: 4.53.0
    cpe:2.3:a:synk:broker:4.53.0
  • Synk » Broker » Version: 4.54.0
    cpe:2.3:a:synk:broker:4.54.0
  • Synk » Broker » Version: 4.55.0
    cpe:2.3:a:synk:broker:4.55.0
  • Synk » Broker » Version: 4.55.1
    cpe:2.3:a:synk:broker:4.55.1
  • Synk » Broker » Version: 4.56.0
    cpe:2.3:a:synk:broker:4.56.0
  • Synk » Broker » Version: 4.57.0
    cpe:2.3:a:synk:broker:4.57.0
  • Synk » Broker » Version: 4.58.0
    cpe:2.3:a:synk:broker:4.58.0
  • Synk » Broker » Version: 4.59.0
    cpe:2.3:a:synk:broker:4.59.0
  • Synk » Broker » Version: 4.59.1
    cpe:2.3:a:synk:broker:4.59.1
  • Synk » Broker » Version: 4.6.0
    cpe:2.3:a:synk:broker:4.6.0
  • Synk » Broker » Version: 4.60.0
    cpe:2.3:a:synk:broker:4.60.0
  • Synk » Broker » Version: 4.61.0
    cpe:2.3:a:synk:broker:4.61.0
  • Synk » Broker » Version: 4.62.0
    cpe:2.3:a:synk:broker:4.62.0
  • Synk » Broker » Version: 4.62.1
    cpe:2.3:a:synk:broker:4.62.1
  • Synk » Broker » Version: 4.63.0
    cpe:2.3:a:synk:broker:4.63.0
  • Synk » Broker » Version: 4.64.0
    cpe:2.3:a:synk:broker:4.64.0
  • Synk » Broker » Version: 4.65.0
    cpe:2.3:a:synk:broker:4.65.0
  • Synk » Broker » Version: 4.66.0
    cpe:2.3:a:synk:broker:4.66.0
  • Synk » Broker » Version: 4.66.1
    cpe:2.3:a:synk:broker:4.66.1
  • Synk » Broker » Version: 4.67.0
    cpe:2.3:a:synk:broker:4.67.0
  • Synk » Broker » Version: 4.68.0
    cpe:2.3:a:synk:broker:4.68.0
  • Synk » Broker » Version: 4.68.1
    cpe:2.3:a:synk:broker:4.68.1
  • Synk » Broker » Version: 4.68.2
    cpe:2.3:a:synk:broker:4.68.2
  • Synk » Broker » Version: 4.68.3
    cpe:2.3:a:synk:broker:4.68.3
  • Synk » Broker » Version: 4.69.0
    cpe:2.3:a:synk:broker:4.69.0
  • Synk » Broker » Version: 4.69.1
    cpe:2.3:a:synk:broker:4.69.1
  • Synk » Broker » Version: 4.69.2
    cpe:2.3:a:synk:broker:4.69.2
  • Synk » Broker » Version: 4.69.3
    cpe:2.3:a:synk:broker:4.69.3
  • Synk » Broker » Version: 4.69.4
    cpe:2.3:a:synk:broker:4.69.4
  • Synk » Broker » Version: 4.69.5
    cpe:2.3:a:synk:broker:4.69.5
  • Synk » Broker » Version: 4.7.0
    cpe:2.3:a:synk:broker:4.7.0
  • Synk » Broker » Version: 4.70.0
    cpe:2.3:a:synk:broker:4.70.0
  • Synk » Broker » Version: 4.71.0
    cpe:2.3:a:synk:broker:4.71.0
  • Synk » Broker » Version: 4.72.0
    cpe:2.3:a:synk:broker:4.72.0
  • Synk » Broker » Version: 4.72.1
    cpe:2.3:a:synk:broker:4.72.1
  • Synk » Broker » Version: 4.72.2
    cpe:2.3:a:synk:broker:4.72.2
  • Synk » Broker » Version: 4.73.0
    cpe:2.3:a:synk:broker:4.73.0
  • Synk » Broker » Version: 4.73.1
    cpe:2.3:a:synk:broker:4.73.1
  • Synk » Broker » Version: 4.74.0
    cpe:2.3:a:synk:broker:4.74.0
  • Synk » Broker » Version: 4.75.0
    cpe:2.3:a:synk:broker:4.75.0
  • Synk » Broker » Version: 4.75.1
    cpe:2.3:a:synk:broker:4.75.1
  • Synk » Broker » Version: 4.75.2
    cpe:2.3:a:synk:broker:4.75.2
  • Synk » Broker » Version: 4.76.0
    cpe:2.3:a:synk:broker:4.76.0
  • Synk » Broker » Version: 4.77.0
    cpe:2.3:a:synk:broker:4.77.0
  • Synk » Broker » Version: 4.78.0
    cpe:2.3:a:synk:broker:4.78.0
  • Synk » Broker » Version: 4.8.0
    cpe:2.3:a:synk:broker:4.8.0
  • Synk » Broker » Version: 4.9.0
    cpe:2.3:a:synk:broker:4.9.0
  • Synk » Broker » Version: 4.9.1
    cpe:2.3:a:synk:broker:4.9.1


Contact Us

Shodan ® - All rights reserved