Описание
OS Command Injection in im-resize
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Пакеты
Наименование
im-resize
npm
Затронутые версииВерсия исправления
<= 2.3.2
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
около 6 лет назад
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.