PT-2022-15754 · Snyk · Snyk-Mvn-Plugin+7

Ron Masas · Published 2022-11-30 · Updated 2023-08-08 · CVE-2022-22984

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions snyk versions prior to 1.1064.0 snyk-mvn-plugin versions prior to 2.31.3 snyk-gradle-plugin versions prior to 3.24.5 @snyk/snyk-cocoapods-plugin versions prior to 2.5.3 snyk-sbt-plugin versions prior to 2.16.2 snyk-python-plugin versions prior to 1.24.2 snyk-docker-plugin versions prior to 5.6.5 @snyk/snyk-hex-plugin versions prior to 1.1.6

Description The issue allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. A successful exploit requires a user to execute the snyk test command on untrusted files. This could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline.

Recommendations For snyk versions prior to 1.1064.0, update to version 1.1064.0 or later. For snyk-mvn-plugin versions prior to 2.31.3, update to version 2.31.3 or later. For snyk-gradle-plugin versions prior to 3.24.5, update to version 3.24.5 or later. For @snyk/snyk-cocoapods-plugin versions prior to 2.5.3, update to version 2.5.3 or later. For snyk-sbt-plugin versions prior to 2.16.2, update to version 2.16.2 or later. For snyk-python-plugin versions prior to 1.24.2, update to version 1.24.2 or later. For snyk-docker-plugin versions prior to 5.6.5, update to version 5.6.5 or later. For @snyk/snyk-hex-plugin versions prior to 1.1.6, update to version 1.1.6 or later. As a temporary workaround, consider avoiding the execution of the snyk test command on untrusted files until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-22984

GHSA-4X6G-3CMX-W76R

Affected Products

Snyk

Snyk-Cocoapods-Plugin

Snyk-Docker-Plugin

Snyk-Gradle-Plugin

Snyk-Hex-Plugin

Snyk-Mvn-Plugin

Snyk-Python-Plugin

Snyk-Sbt-Plugin

References · 21

• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKSBTPLUGIN-3038626 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKSNYKHEXPLUGIN-3039680 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKSNYKCOCOAPODSPLUGIN-3038625 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYK-3038622 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKPYTHONPLUGIN-3039677 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKGRADLEPLUGIN-3038624 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKMVNPLUGIN-3038623 · Exploit
• 🔥 https://security.snyk.io/vuln/SNYK-JS-SNYKDOCKERPLUGIN-3039679 · Exploit
• 🔥 https://imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution · Exploit
• https://github.com/snyk/cli/commit/80d97a93326406e09776156daf72e3caa03ae25a · Patch
• https://github.com/snyk/snyk-docker-plugin/commit/d730d7630691a61587b120bb11daaaf4b58a8357 · Patch
• https://github.com/snyk/snyk-gradle-plugin/commit/bb1c1c72a75e97723a76b14d2d73f70744ed5009 · Patch
• https://github.com/snyk/snyk-python-plugin/commit/8591abdd9236108ac3e30c70c09238d6bb6aabf4 · Patch
• https://github.com/snyk/snyk-sbt-plugin/commit/99c09eb12c9f8f2b237aea9627aab1ae3cab6437 · Patch
• https://github.com/snyk/snyk-mvn-plugin/commit/02cda9ba1ea36b00ead3f6ec2de0f97397ebec50 · Patch