CVE-2020-7653

CVE-2020-7653 is an Arbitrary File Read vulnerability affecting all versions of snyk-broker prior to 4.80.0. This flaw allows an authenticated attacker on Snyk's internal network to read arbitrary files by exploiting symlink creation to bypass whitelisted path restrictions. Rated with a CVSS score of 6.5 (Medium), the vulnerability has a network attack vector, low attack complexity, and high confidentiality impact. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.