Non notée
CVE-2019-10787 im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument
Description
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| im-resize | Versions non publiées |