ImageMagick Server-Side Request Forgery (SSRF) Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 7.0.0-0= 7.0.1-0< 6.9.3-10 | 6.9.3-10 |
| linux enterprise debuginfo | = 11 | |
| manager | = 2.1 | |
| manager proxy | = 2.1 | |
| openstack cloud | = 5 |
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free