Known vulnerabilities in Broker

Vendor: Snyk Ltd.
Software: Broker
Software CPE: cpe:2.3:a:snyk:snyk-broker:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Broker Broker is affected by 9 known vulnerabilities: 9 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88532 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-29041
CWE-601 Medium
No
No
4.181.2 15.04.2024 SB2024041530
SB2024041532
SB2024042918
and 44 more
#VU54594 - Resource exhaustion
CWE-400 Medium
No
No
4.109.2 07.07.2021 SB2021070717
#VU28758 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7654
CWE-200 Medium
No
No
4.73.1 05.06.2020 SB2020060509
#VU28757 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7653
CWE-22 Medium
No
No
4.80.0 05.06.2020 SB2020060511
#VU28756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7652
CWE-22 Medium
No
No
4.80.0 05.06.2020 SB2020060511
#VU28755 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7651
CWE-200 Medium
No
No
4.79.0 05.06.2020 SB2020060510
#VU28754 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7650
CWE-200 Medium
No
No
4.73.1 05.06.2020 SB2020060509
#VU28753 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7649
CWE-22 Medium
No
No
4.73.0 05.06.2020 SB2020060508
#VU28752 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7648
CWE-200 Medium
No
No
4.72.2 05.06.2020 SB2020060507