- Vendor / Project
- ImageMagick
- Product
- ImageMagick
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-20
Description
ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.
Required action
Apply updates per vendor instructions.