medium6.5
CVE-2024-53615
files.photo.gallery command injection
Impact
A command injection vulnerability in the video thumbnail rendering component of files.photo.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | files.photo.gallery | >= 0.3.0, <= 0.11.0 | none recorded |
Affected products
| Product | Affected versions |
|---|---|
| Karl Ward'S Files.Gallery V0.3.0 | through 0.11.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.