8.4 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a POST request to /probe.
www.openwall.com/lists/oss-security/2014/05/13/1
www.openwall.com/lists/oss-security/2014/05/15/2
nodesecurity.io/advisories/codem-transcode_command_injection