Lucene search

K
cvelistMitreCVELIST:CVE-2022-44268
HistoryFeb 06, 2023 - 12:00 a.m.

CVE-2022-44268

2023-02-0600:00:00
mitre
www.cve.org
6
imagemagick
png
information disclosure
vulnerability
permissions
reading file

AI Score

6.7

Confidence

High

EPSS

0.022

Percentile

89.6%

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).