CVE-2022-44268 PoC — ImageMagick 安全漏洞

Source

https://github.com/NataliSemi/-CVE-2022-44268

Associated Vulnerability

Title: ImageMagick 安全漏洞 (CVE-2022-44268)
Description:ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

Readme

# PNG Image Generator

This Python script generates a PNG image filled with a specific color and embeds a file path as metadata using the Pillow library.

## Running the Script

### Prerequisites
- Python (install from [Python's official website](https://www.python.org/))
- Pillow library (`pip install pillow`)

### Steps

1. **Clone the Repository:**
   ```bash
   git clone https://github.com/NataliSemi/-CVE-2022-44268.git
   cd -CVE-2022-44268.git

2. Install Required Packages:
    ```bash
    pip install pillow
    pip install pypng

3. Run the Script:
    ```bash
    python create_image.py

Generated Image:
After running the script, an image file named image.png will be created in the repository directory.

## Example:
python create_image.py -f /path/to/local/file.txt -o output_image.png

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →