| शीर्षक | Node.js find-cypress-specs 1.54.12 OS Command Injection |
|---|
| विवरण | find-cypress-specs accepts a --branch option to print specs changed against origin/<branch>.
The --branch value is interpolated directly into shell command strings and executed with shell.exec(). A branch name containing shell metacharacters can therefore execute additional commands.
Tested version:
find-cypress-specs 1.54.12
Public CLI used:
npx find-cypress-specs --branch <branch>
Relevant code:
// src/index.js
shell.exec(`git merge-base origin/${branch} HEAD`, {
silent: true,
})
// ...
const command = `git diff --name-only --diff-filter=AMR origin/${branch}`
const result = shell.exec(command, { silent: true })
The README documents --branch as a normal branch-name parameter:
npx find-cypress-specs --branch main |
|---|
| स्रोत | ⚠️ https://github.com/bahmutov/find-cypress-specs/issues/423 |
|---|
| उपयोगकर्ता | wjm2 (UID 99050) |
|---|
| सबमिशन | 17/06/2026 08:41 AM (1 महीना पहले) |
|---|
| संयम | 23/07/2026 09:37 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 382478 [bahmutov find-cypress-specs तक 1.54.12 Branch src/index.js shell.exec --branch अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|