Lucene search

K
osvGoogleOSV:CVE-2022-23935
HistoryJan 25, 2022 - 6:15 a.m.

CVE-2022-23935

2022-01-2506:15:06
Google
osv.dev
8
exiftool
command injection
vulnerability

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

34.7%

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /|$/ check, leading to command injection.