CVE-2019-10787

Published
View on NVD ↗
CVSS v3
9.8
CRITICAL
CVSS v2
10
HIGH
Affected
1
PROJECT

Description

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.

Efficient image resize with multiple versions support
GitHubGitHub
19