CVE-2019-10788

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p83

Published

Feb 4, 2020 (Feb 4, 2020)

Modified

Jun 17, 2026

Description

im-metadata through 3.0.1 allows remote attackers to execute arbitrary commands via the "exec" argument. It is possible to inject arbitrary commands as part of the metadata options which is given to the "exec" function.

Vendors: dnt
Products: im-metadata
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.