CVE-2020-7683 is a path traversal vulnerability impacting all versions of the rollup-plugin-server package, stemming from a lack of path sanitization in the readFileFromContentBase function. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to read arbitrary files on the server, potentially leading to information disclosure. While no public exploits or active exploitation have been observed, and community discussion is minimal, the absence of proper input validation makes this a critical flaw.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:rollup-plugin-server_project:rollup-plugin-server:*:*:*:*:*:node.js:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.