A vulnerability in ImageMagick leading to leakage of local file content
A vulnerability CVE-2022-44268 has been discovered in ImageMagick, which is commonly used by web developers for image conversion, that may lead to the leakage of file content when processing PNG images prepared by an attacker through ImageMagick. This vulnerability threatens systems that process external images and then allow the upload of the conversion results. The vulnerability arises from ImageMagick using the content of the 'profile' parameter when processing PNG images […]
