ID CVE-2022-44268
Summary ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).
References
Vulnerable Configurations
  • cpe:2.3:a:imagemagick:imagemagick:7.1.0-49:*:*:*:*:*:*:*
    cpe:2.3:a:imagemagick:imagemagick:7.1.0-49:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 06-04-2023 - 17:15
Published 06-02-2023 - 21:15
Last modified 06-04-2023 - 17:15
Back to Top