Not rated
CVE-2019-10787 im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument
Description
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| im-resize | Versions not published |