CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-26 and 6.9.13-x before 6.9.13-51 are vulnerable to a policy bypass in the -script operation, enabling unauthorized access to files from restricted paths. This could lead to sensitive data exposure, making it a concern for organizations that utilize ImageMagick for image processing. Users of affected versions should prioritize updating their software to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy.
Related CVEs
Other vulnerabilities affecting the same vendor(s)