Published: 24/02/2020 Updated: 24/03/2020

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Arbitrary filesystem write vulnerability in Yarn prior to 1.22.0 allows malicious users to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install a malicious package.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yarnpkg yarn

Synopsis Moderate: Red Hat Quay v340 security update Type/Severity Security Advisory: Moderate Topic Red Hat Quay 340 is now available with bug fixes and variousenhancementsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVS ...

Debian Bug report logs - #952912 node-yarnpkg: CVE-2020-8131 Package: src:node-yarnpkg; Maintainer for src:node-yarnpkg is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 1 Mar 2020 20:27:01 UTC Severity: important Tags: s ...

CWE-22 https://hackerone.com/reports/730239 https://github.com/yarnpkg/yarn/pull/7831 https://access.redhat.com/errata/RHSA-2021:0420 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-8131

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect