GHSA-r9vm-rhmf-7hxxHighCVSS 9.8

OS Command Injection in im-resize

Published
April 13, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-10787 →

📋 Description

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.

🎯 Affected products1

  • npm/im-resize:<= 2.3.2

🔗 References (4)