codem-transcode project vulnerabilities

Products

• codem-transcode 1

Latest codem-transcode project CVEs

Newest publication first

1. CVE-2013-7377 Potential Command Injection in codem-transcode

   Published 2017-10-23

   High·CVSS 8.1 EPSS 2.0%

   The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a POST request to /probe.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.