← Back to CVE List
CVE-2019-10787
im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt