CVE-2020-28435

The CVE-2020-28435 entry affects all versions of the Node.js package ffmpeg-sdk . The root cause is a command injection vulnerability in the injection point at line 9 in index.js (function execute), allowing arbitrary commands to be executed. In the reported PoC, an attacker calls root.execute("t...

CVE-2020-28435 Command Injection

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...