CVE-2019-10788
OS Command Injection in im-metadata
Résumé
OS Command Injection in im-metadata
Description d'origine
La description telle que publiée par la source (souvent en anglais).
im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
im-metadata
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"3.0.1"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web snyk.io