Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5qh-f5rv-grcp

Опубликовано: 06 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

EPSS

Процентиль: 100%
0.89475
Высокий

6.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

CVSS3: 6.5
redhat
больше 2 лет назад

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

CVSS3: 6.5
nvd
больше 2 лет назад

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

CVSS3: 6.5
debian
больше 2 лет назад

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it ...

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость графического редактора ImageMagick, связанная с ошибками при обработке входных данных, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 100%
0.89475
Высокий

6.5 Medium

CVSS3

Дефекты

CWE-200