EDB-50911

PoC

ExifTool 12.23 - Arbitrary Code Execution

view exploit source exploit_dbtype localauthor UNICORDpublished 2022-05-11catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-22204US	high7.8OT critical	100.0% (100th)	KEV	2021-04-23
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.