CVE-2023-34152

CriticalCVSS 9.8

Published: 30/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

8.01%

94th percentile - higher than 94% of all known CVEs

Summary

A vulnerability was found in ImageMagick that leads to a remote code execution vulnerability in OpenBlob when the --enable-pipes option is configured.

Risk Assessment

This vulnerability could allow attackers to remotely execute code on the server, posing a significant security threat.

Recommendation

It is recommended to disable the --enable-pipes option in the ImageMagick configuration and update to the latest version to minimize risk.

Original NVD description (English source)

A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.