Minimagick

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-13574	Minimagick Project Minimagick	Hig	0.44	7.8	0.08		Jul 12, 2019	In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '\|' character followed by a command.

CVE-2019-13574HigJul 12, 2019
Minimagick Project
Minimagick
risk 0.44cvss 7.8epss 0.08
In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command.