Ashifcoder/CVE-2022-44268-automated-poc

PoC

An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image in Image Magic.

view exploit source poc_in_githubauthor Ashifcoderpublished 2023-02-04catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-44268US	medium6.5	89.9% (100th)	Exploit	2023-02-06
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. fi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.