cbcvebase.

Minimagick Project Minimagick vulnerabilities

1 known vulnerability affecting minimagick_project/minimagick.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2019-13574P3HIGHCVSS 7.8fixed in 4.9.42019-07-12
CVE-2019-13574 [HIGH] CWE-78 CVE-2019-13574: In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command.
nvd
Minimagick Project Minimagick vulnerabilities | cvebase