CVE-2023-38695

CVE-2023-38695 describes a path traversal vulnerability in simonsmith cypress_image_snapshot prior to version 8.0.2. An authenticated attacker can exploit this flaw by providing a relative file path as the snapshot name, allowing them to access files outside the project directory on the machine running the tests. With a CVSS score of 6.5 (Medium), this vulnerability has a network attack vector and low attack complexity, potentially leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.