未評価

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This v...

CVE-2026-114523 SecPulse初出 2:35

影響パッケージ

種類	パッケージ	影響を受ける版	直った版
Packagist:https://packages.drupal.org/8	drupal/ffmpeg_image_toolkit	1.0.3 未満	1.0.3

原文の説明取得元が公開している説明をそのまま載せています (多くは英語)。

This module enables you to use ffmpeg for image conversion

The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool.

This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

NVD OSV