CERT24GHSA-9r9r-c7x8-qp3rLoading data…
CERT24Threat Observatory
Period

GHSA-9r9r-c7x8-qp3r

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain a policy-bypass vulnerability in LoadPolicyCache. When policy.xml uses an alternate DOCTYPE, the parser may consume the rest of the file, causing security policy rules not to be applied and restricted operations to become allowed.

← Back to intelligence

GHSA-9r9r-c7x8-qp3r

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain a policy-bypass vulnerability in LoadPolicyCache. When policy.xml uses an alternate DOCTYPE, the parser may consume the rest of the file, causing security policy rules not to be applied and restricted operations to become allowed.