fuel/core · Security
fuel/core ImageMagick driver does not escape all shell arguments.
- GHSA ID
- GHSA-26hp-cgjj-m2j3
- Severity
- high
- Published
- Updated
Description
This vulnerability may cause OS commands to be executed when you pass unvalidated image filenames containing specially crafted strings to the ImageMagick driver.
CWEs
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')