PoC Index

CVE-2016-3718

KEVMEDIUM 5.5EPSS 76.9%

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
76.90% chance of exploitation in the next 30 days, 100th percentile
CISA KEV
added 2021-11-03
Published
2016-05-05
Updated
2025-10-21

ExploitDB entries (1)

References

Related