Description
textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files.
Unscored
CVE-2016-10320
EUVD-2016-1505GHSA-2h98-6q8m-mm63
textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if …
Published Apr 6, 2017 · Updated Sep 16, 2024 · Assigned by mitre