Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Dnt Subscribe
Filtered by product Im-metadata
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10788 1 Dnt 1 Im-metadata 2020-08-24 7.5 HIGH 9.8 CRITICAL
im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function.