CVE-2023-38695 (cypress_image_snapshot) | allinfosecnews.com

Aug. 4, 2023, 6:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in version 8.0.2.

cve directory file image issue machine name pass path project relative running test version

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 6 months, 1 week ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 6 months, 1 week ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 6 months, 1 week ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 6 months, 1 week ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 6 months, 1 week ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 6 months, 1 week ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 6 months, 1 week ago | web.nvd.nist.gov

android bypass check cve +10

Sr. Staff Security Engineer

@ Databricks | San Francisco, California

View on infosec-jobs.com

Security Engineer

@ Nomi Health | Austin, Texas

View on infosec-jobs.com

Senior Principal Consultant, Security Architecture

@ 6point6 | Manchester, United Kingdom

View on infosec-jobs.com

Cyber Policy Advisor

@ IntelliBridge | McLean, VA, McLean, VA, US

View on infosec-jobs.com

TW Full Stack Software Engineer (Access Control & Intrusion Systems)

@ Bosch Group | Taipei, Taiwan

View on infosec-jobs.com

Cyber Software Engineer

@ Peraton | Annapolis Junction, MD, United States

View on infosec-jobs.com