CVE-2020-8131 REJECTED

Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install a malicious package.

EPSS 0.90% · 75.5th percentile

Risk Scores

EPSS Score
0.90%
75.5th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSnode-yarnpkg0, 1.13.0-1build1, 1.13.0-3

Timeline

References

Open in Interactive Console →