CVE-2016-10320

textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files...

CVE-2016-10320

Textract (Python library) for versions before 1.5.0 is affected by CVE-2016-10320 due to an OS command injection vulnerability in the process function triggered by a filename. The issue could enable a remote attacker to execute arbitrary commands in scenarios where a web application accepts names...