Lucene search

K
osvGoogleOSV:GHSA-R9VM-RHMF-7HXX
HistoryApr 13, 2021 - 3:17 p.m.

OS Command Injection in im-resize

2021-04-1315:17:06
Google
osv.dev
6

0.004 Low

EPSS

Percentile

72.4%

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the “exec” argument. The cmd argument used within index.js, can be controlled by user without any sanitization.

CPENameOperatorVersion
im-resizele2.3.2

0.004 Low

EPSS

Percentile

72.4%

Related for OSV:GHSA-R9VM-RHMF-7HXX