En resumen
- CVE-2019-10061 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a node-opencv (node-opencv project), opencv.
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.2%, mayor que el 91.1% de las vulnerabilidades.
- Solución: actualizar a 6.1.0 o posterior.
Description
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
NVD description
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free