logo

Database

Lack of data validation - Path Traversal In magick.net-q16-anycpu

Description

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 17

10

Aliases

1. GHSA-v3j6-27vc-7pw22. GCVE-GHSA-v3j6-27vc-7pw2

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v3j6-27vc-7pw22. https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.