Command Injection in opencv

FAIBLEGHSA-f698-m2v9-5fh3 · Published 04/06/2019 · updated 31/08/2020

En bref

GHSA-f698-m2v9-5fh3 est une vulnérabilité FAIBLE touchant opencv.
Correctif : mettre à jour vers 6.1.0 ou plus récent.

Package	Affected versions	Patched versions
opencv npm	`< 6.1.0`	`6.1.0`

Description

Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands.

Recommendation

Upgrade to version 6.1.0.

References

peterbraden/node-opencv commit 81a4b86 · WEB
npmjs.com/advisories/789 · WEB

Autres vulnérabilités de opencv

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free