Description
transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted audioPath values to transcribeAudio(). Attackers can inject $() or backtick substitution or a closing quote into the unescaped path passed to child_process.exec() to run commands with Node.js process privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kky-ykk | transcribe2texts | ≤ 1.0.6 | — |
References
- https://github.com/kky-ykk/Transcribe2texts/pull/1 patch issue-tracking
- https://github.com/kky-ykk/Transcribe2texts/blob/7e82f96466fed9ccfc40f7b9e370321701b82c32/lib/index.js#L53-L55 technical-description
- VulnCheck Advisory: transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath third-party-advisory