CVE-2019-10787
OS Command Injection in im-resize
Summary
OS Command Injection in im-resize
Original description
The description as published by the source.
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
im-resize
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.3.2"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web snyk.io