Home > Vulnerability Database > WS-2019-0035

WhiteSource Vulnerability Database

WS-2019-0035

Good to know:

Date: March 31, 2019

Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands.

Language: JS

Severity Score

0.0

Related Resources (2)

Url: https://www.npmjs.com/advisories/789

Url: https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0035

Weakness Type (CWE)

Command Injection

CWE-77

Injection

CWE-74

Top Fix

Upgrade Version

Upgrade to version 6.1.0

Learn More