logo

Database

Lack of data validation In libimage-exiftool-perl

Description

arbitrary code execution

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-222042. NVD-2021-222043. OSV-DEBIAN-2021-222044. OSV-2021-222045. SECURITY-TRACKER-CVE-2021-22204

References

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-222042. https://github.com/convisolabs/CVE-2021-22204-exiftool3. https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_exif_rce.rb

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.