漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. `#package.json`
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
snyk-broker 信息泄露漏洞
Vulnerability Description
snyk-broker是一款用于snyk.io和Git存储库之间访问的代理程序。 snyk-broker 4.72.2之前版本中存在安全漏洞。攻击者可利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A