CVE-2022-23935
HIGH
7.8
CVSS Severity Score
Vulnerability Description
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.
Affected Platforms (CPE)
📦
Exiftool Project
Exiftool
< 12.38
Back to CVE Browser
Related Vulnerabilities
CVE-2021-222046.8
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when...
CVE-2018-202117.8
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's...