Medium severity6.5NVD Advisory· Published May 29, 2020· Updated Jun 17, 2026

CVE-2020-7652

Description

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
snyk-brokernpm	< 4.80.0	4.80.0

Affected products

Synk/Broker
cpe:2.3:a:synk:broker:*:*:*:*:*:*:*:*
Range: <4.80.0
snyk-broker/snyk-brokerdescription
ghsa-coords
pkg:npm/snyk-broker
Range: < 4.80.0

Patches

Vulnerability mechanics

References

snyk.io/vuln/SNYK-JS-SNYKBROKER-570611nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-x7m2-6g99-84w5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7652ghsaADVISORY
updates.snyk.io/snyk-broker-security-fixes-152338nvdVendor AdvisoryWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000