PT-2020-19749 · Grunt+3 · Grunt+3

Published 2020-09-03 · Updated 2023-02-07 · CVE-2020-7729

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions grunt versions prior to 1.3.0

Description The issue is related to Arbitrary Code Execution due to the default usage of the load() function instead of its secure replacement safeLoad() of the js-yaml package inside grunt.file.readYAML.

Recommendations For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue. As a temporary workaround, consider replacing the load() function with safeLoad() in the js-yaml package to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

AZL-44379

CVE-2020-7729

DLA-2368-1

GHSA-M5PJ-VJJF-4M3H

OESA-2022-1544

OESA-2022-2048

SNYK-JAVA-ORGWEBJARSNPM-607922

SNYK-JS-GRUNT-597546

USN-4595-1

USN-5847-1

Affected Products

Linuxmint

Ubuntu

Grunt

Js-Yaml

References · 26

• 🔥 https://snyk.io/vuln/SNYK-JS-GRUNT-597546 · Exploit
• https://github.com/gruntjs/grunt/commit/e350cea1724eb3476464561a380fb6a64e61e4e7 · Patch
• https://ubuntu.com/security/CVE-2020-7729 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5847-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-7729 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7729 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1544 · Vendor Advisory
• https://usn.ubuntu.com/4595-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-7729 · Security Note
• https://ubuntu.com/security/notices/USN-4595-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2368-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4595-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-44379 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m5pj-vjjf-4m3h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7729 · Vendor Advisory