logo

Database

Lack of data validation - Path Traversal In magick.net-q16-anycpu

Description

ImageMagick: Policy Bypass in script operation due to missing checks The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 17

10

Aliases

1. GHSA-vghg-5jrg-23982. GCVE-GHSA-vghg-5jrg-2398

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vghg-5jrg-23982. https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.