漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
snyk-broker 信息泄露漏洞
Vulnerability Description
snyk-broker是一款用于snyk.io和Git存储库之间访问的代理程序。 snyk-broker 4.72.0及之后版本(4.73.1版本已修复)中存在安全漏洞。攻击者可利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A