Описание
fuel/core ImageMagick driver does not escape all shell arguments.
This vulnerability may cause OS commands to be executed when you pass unvalidated image filenames containing specially crafted strings to the ImageMagick driver.
Пакеты
Наименование
fuel/core
composer
Затронутые версииВерсия исправления
< 1.8.0.4
1.8.0.4
Дефекты
CWE-78
Дефекты
CWE-78