← back
CVE-2023-34152

CVE-2023-34152

CVSS 9.8 CRITICALEPSS 8.0%CWE-20
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · ImageMagick
public PoCs found — 2
githubgithub.com/overgrowncarrot1/ImageTragick_CVE-2023-34152★ 9githubgithub.com/SudoIndividual/CVE-2023-34152★ 4
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://access.redhat.com/security/cve/CVE-2023-34152https://bugzilla.redhat.com/show_bug.cgi?id=2210659https://github.com/ImageMagick/ImageMagick/issues/6339https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/