Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2022-015

This module enables you to automatically scan images uploaded to the site to extract their meta data and store it in taxonomy structures. T…

Published Jan 25, 2022 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

This module enables you to automatically scan images uploaded to the site to extract their meta data and store it in taxonomy structures.

The module doesn't sufficiently protect against malicious files being used to attack the site.

This vulnerability is mitigated by the fact that an attacker must have permission to upload images to the site.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/exif < 1.3.0 · >= 2.2.0, < 2.3.0 1.3.0, 2.3.0 DRUPAL-CONTRIB-2022-015

References