Security Advisory

CVE-2019-10787

9.8
CRITICAL

Vulnerability Description

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
Published Date February 4, 2020
Official Source NIST NVD Advisory