ImageMagick 7.1.0-49 - Arbitrary File Read

Author: Cristian Giustini
type: local
platform: multiple
port: 
date_added: 2023-04-05 
date_updated: 2023-04-24 
verified: 0 
codes: CVE-2022-44268 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: ImageMagick  7.1.0-49 - Arbitrary File Read
# Google Dork: N/A
# Date: 06/02/2023
# Exploit Author: Cristian 'void' Giustini
# Vendor Homepage: https://imagemagick.org/
# Software Link: https://imagemagick.org/
# Version: <= 7.1.0-49
# Tested on: 7.1.0-49 and 6.9.11-60
# CVE : CVE-2022-44268 (CVE Owner: Metabase Q Team
https://www.metabaseq.com/imagemagick-zero-days/)
# Exploit pre-requirements: Rust


# PoC : https://github.com/voidz0r/CVE-2022-44268