PT-2023-26560 · Unknown · Cypress-Image-Snapshot

Thib3113 · Publicado 2023-08-01 · Atualizado 2023-08-09 · CVE-2023-38695

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions cypress-image-snapshot versions prior to 8.0.2

Description The issue allows a user to pass a relative file path for the snapshot name, potentially reaching outside of the project directory into the machine running the test. This can be achieved by using relative paths in the matchImageSnapshot function, such as ../../../ignore-relative-dirs, which can create files outside the intended directory.

Recommendations For versions prior to 8.0.2, update to version 8.0.2 to resolve the issue. As a temporary workaround, validate all existing uses of matchImageSnapshot to ensure correct use of the filename argument, and consider using the function without specifying a filename, allowing it to default to the test title, such as cy.matchImageSnapshot().

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-38695

GHSA-VXJG-HCHX-CC4G

Produtos afetados

Cypress-Image-Snapshot

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38695.json · Exploit
• 🔥 https://github.com/simonsmith/cypress-image-snapshot/issues/15 · Exploit
• 🔥 https://github.com/simonsmith/cypress-image-snapshot/security/advisories/GHSA-vxjg-hchx-cc4g · Exploit
• https://github.com/simonsmith/cypress-image-snapshot/commit/ef49519795daf5183f4fac6f3136e194f20f39f4 · Correção
• https://github.com/simonsmith/cypress-image-snapshot/releases/tag/8.0.2 · Nota
• https://github.com/simonsmith/cypress-image-snapshot · Nota
• https://osv.dev/vulnerability/GHSA-vxjg-hchx-cc4g · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-38695 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-38695 · Aviso do Fabricante