CVE-2020-7683 in rollup-plugin-serve

Résumé

par MITRE

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Snyk
• Réserver: 21/01/2020
• Modérer: accepté
• Entrée: VDB-159003
• CPE: prêt
• CWE: CWE-22 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.01768
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7683
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7683
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7683/