CVE-2022-23935

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection

published January 25, 2022

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07575 · 94.5th percentile
Published
2022-01-25T05:10Z
EPSS history
Timeline
  • 25 JAN 05:10Z
    lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection
    cvelistv5