CVE-2019-10787
OS Command Injection in im-resize
Résumé
OS Command Injection in im-resize
Description d'origine
La description telle que publiée par la source (souvent en anglais).
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
im-resize
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.3.2"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web snyk.io