Skip to content

Commit 9a02e69

Browse files
authored
A few edits to CVE-2019-13574
1 parent 40cb86d commit 9a02e69

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed
Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,14 @@
11
gem: mini_magick
22
cve: 2019-13574
3-
url: https://github.com/minimagick/minimagick/releases/tag/v4.9.4
3+
url: https://benjamin-bouchet.com/blog/vulnerabilite-dans-la-gem-mini_magick-version-4-9-4/
44
title: Remote command execution via filename
55
date: 2019-07-12
66
description: |
77
A remote shell execution vulnerability when using MiniMagick::Image.open with URL coming from unsanitized user input.
88
e.g. `MiniMagick::Image.open("| touch.txt")`
9+
cvss_v3: 7.5
910
patched_versions:
1011
- ">= 4.9.4"
12+
related:
13+
url:
14+
- https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851

0 commit comments

Comments
 (0)