En bref
- CVE-2019-10061 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant node-opencv (node-opencv project), opencv.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.2%, plus élevée que 91.1% des vulnérabilités.
- Correctif : mettre à jour vers 6.1.0 ou plus récent.
Description
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
NVD description
utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free