4 matches found
dejavu
DejaVu This container runs a web application that analyzes images and returns their metadata using exiftool. Users send the application a URL to an image and the app will retrieve it, analyze it, and return the results. The version of exiftool used by the application is vulnerable to CVE-2021-222...
7.8CVSS8.3AI score0.99981EPSS
SaveExploits40
Gitlab-Exiftool-RCE
Gitlab-Exiftool-RCE RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the GitLab Workhorse could achieve RCE via a specially crafted file Usage python3...
7.8CVSS8AI score0.99981EPSS
SaveExploits40
20