Description
The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a POST request to /probe.
Remediation
References
http://www.openwall.com/lists/oss-security/2014/05/13/1
http://www.openwall.com/lists/oss-security/2014/05/15/2
https://nodesecurity.io/advisories/codem-transcode_command_injection
Related Vulnerabilities
CVE-2019-10364 Vulnerability in maven package org.jenkins-ci.plugins:ec2
CVE-2021-46708 Vulnerability in maven package org.webjars.bower:swagger-ui
CVE-2021-33562 Vulnerability in maven package com.shopizer:shopizer
CVE-2020-17530 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2019-12399 Vulnerability in maven package org.apache.kafka:kafka