Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-23935

Опубликовано: 25 янв. 2022
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 7.6
CVSS3: 7.8

Описание

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /|$/ check, leading to command injection.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

12.44+dfsg-1
esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

12.44+dfsg-1
esm-apps/xenial

needs-triage

focal

ignored

end of standard support, was needed
impish

not-affected

jammy

needs-triage

Показывать по

EPSS

Процентиль: 96%
0.27752
Средний

7.6 High

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
около 4 лет назад

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

CVSS3: 7.8
debian
около 4 лет назад

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ / ...

CVSS3: 9.8
github
около 4 лет назад

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check.

EPSS

Процентиль: 96%
0.27752
Средний

7.6 High

CVSS2

7.8 High

CVSS3