PT-2023-26560 · Unknown · Cypress-Image-Snapshot

Thib3113 · Published 2023-08-01 · Updated 2023-08-09 · CVE-2023-38695

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions cypress-image-snapshot versions prior to 8.0.2

Description The issue allows a user to pass a relative file path for the snapshot name, potentially reaching outside of the project directory into the machine running the test. This can be achieved by using relative paths in the matchImageSnapshot function, such as ../../../ignore-relative-dirs, which can create files outside the intended directory.

Recommendations For versions prior to 8.0.2, update to version 8.0.2 to resolve the issue. As a temporary workaround, validate all existing uses of matchImageSnapshot to ensure correct use of the filename argument, and consider using the function without specifying a filename, allowing it to default to the test title, such as cy.matchImageSnapshot().

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-38695

GHSA-VXJG-HCHX-CC4G

Affected Products

Cypress-Image-Snapshot

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38695.json · Exploit
• 🔥 https://github.com/simonsmith/cypress-image-snapshot/issues/15 · Exploit
• 🔥 https://github.com/simonsmith/cypress-image-snapshot/security/advisories/GHSA-vxjg-hchx-cc4g · Exploit
• https://github.com/simonsmith/cypress-image-snapshot/commit/ef49519795daf5183f4fac6f3136e194f20f39f4 · Patch
• https://osv.dev/vulnerability/GHSA-vxjg-hchx-cc4g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38695 · Security Note
• https://osv.dev/vulnerability/CVE-2023-38695 · Vendor Advisory
• https://github.com/simonsmith/cypress-image-snapshot/releases/tag/8.0.2 · Note
• https://github.com/simonsmith/cypress-image-snapshot · Note