CVE-2019-10788
OS Command Injection in im-metadata
Summary
OS Command Injection in im-metadata
Original description
The description as published by the source.
im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
im-metadata
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"3.0.1"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web snyk.io