0xBruno/CVE-2021-22204

PoC

A complete PoC for CVE-2021-22204 exiftool RCE

view exploit source poc_in_githubauthor 0xBrunopublished 2022-01-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-22204US	high7.8OT critical	100.0% (100th)	KEV	2021-04-23
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.