CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-04-23
ExifTool DjVu File Parsing Arbitrary Code Execution Vulnerability (CVE-2021-22204) Security Advisory
[Affected Scope] ExifTool versions 7.44 up to 12.24, and third-party integrations such as GitLab that utilize ExifTool for metadata parsing
[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by uploading a specially crafted DjVu image
[Mitigation] Immediately upgrade ExifTool to version 12.24 or higher, and update GitLab instances to 13.10.3, 13.9.6, 13.8.8, or newer