CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

DEBIAN-CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

AZL-45141 CVE-2022-0436 affecting package js-jquery 3.5.0-4

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

UBUNTU-CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write

Description file.copy operations in GruntJS are vulnerable to a TOC-TOU race condition leading to arbitrary file write when an attacker can create a symlink just after deletion of the dest symlink by repeatedly calling ln -s /etc/shadow2 dest/shadow2 in a while loop but right before the symlink i...

CVE-2022-0436

CVE-2022-0436 describes a path traversal in gruntjs/grunt prior to 1.5.2. Connected advisories confirm Grunt’s vulnerability lies in filesystem path handling (notably in copy/IO paths), enabling a local attacker to traverse directories and read/write files. Affected product: Grunt (GruntJS task r...

CVE-2022-0436

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2...

Path Traversal in gruntjs/grunt

Description Grunt is a JavaScript task runner, a tool used to automatically perform frequent tasks such as minification, compilation, unit testing, and linting. In GruntJS, file.copy operations in GruntJS are not protected against symlink traversal for both source and destination directories...

AWS Key Disabler - A Small Lambda Script That Will Disable Access Keys Older Than A Given Amount Of Days

The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A report containing the output json of...