You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Affected Version
The latest version 0.7.0 and below.
Describe the vulnerability net.bramp.ffmpeg.FFmpeg.<constructor> is designed to create an FFmpeg object. However, passing an unchecked argument to this API can lead to the execution of arbitrary codes. For instance, following codes can lead to the execution of malicious program:
new FFmpeg("C:/Windows/System32/calc.exe");
To Reproduce
Just execute above codes would reproduce it.
Fix Suggestion
Check the parameter of FFmpeg.<constructor> strictly.