Loading CVE intelligence

CVE-2021-22204

HighPublished

ExifTool Remote Code Execution Vulnerability

Published: Apr 23, 2021
Updated: Oct 21, 2025
Assigning CNA: GitLab
Evidence observed: Nov 17, 2021

Primary CVSS

7.8/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

Sources

20

CVE-2021-22204PoC
Proof-of-concept exploit for CVE-2021-22204, a remote code execution vulnerability in ExifTool, demonstrating exploitation via crafted image files.
CVE-2021-22204Exploit
Generate malicious JPEG payloads exploiting ExifTool CVE-2021-22204 for arbitrary code execution, with custom commands or reverse shell support.
CVE-2021-22204-RSEExploit
reverse shell execution exploit of CVE 22204
CVE-2021-22204

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

Exploit

Exploit script for CVE-2021-22204, an ExifTool RCE via malicious DjVu files, with manual exploitation steps and reverse shell payloads.

dejavuPoC

Challenge based on CVE-2021-22204 where users send a malicious file to a web application to gain RCE

POC-CVE-2021-22204PoC

POC for exiftool vuln (CVE-2021-22204).

CVE-2021-22204Exploit

Exploit script for CVE-2021-22204, an RCE vulnerability in ExifTool via malicious DjVu files, targeting versions 7.44 to 12.23.

CVE-2021-22204-exiftoolExploit

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

CVE-2021-22204Exploit

ExifTool RCE exploit (CVE-2021-22204) - improved version, no exiftool dependency

CVE-2021-22204-exiftoolExploit

Python exploit for CVE-2021-22204 in ExifTool, generating a malicious image that triggers a reverse shell when processed by vulnerable versions.

CVE-2021-22204Exploit

Shell script exploit for CVE-2021-22204 targeting Exiftool, generating a malicious .djvu file to achieve remote code execution on vulnerable systems.

CVE-2021-22204Exploit

CVE-2021-22204 exiftool rce

exploit-CVE-2021-22204Exploit

Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution

CVE-2021-22204-GitlabExploit

Modification of gitlab exploit anything under 13.10

CVE-2021-22204Exploit

exiftool arbitrary code execution vulnerability

CVE-2021-22204PoC

In-depth technical analysis of CVE-2021-22204 (ExifTool RCE) with PoC reproduction, payload construction, and Perl code review of the vulnerable DjVu annotation parser.

CVE-2021-22205PoC

CVE-2021-22205 - GitLab Unauthenticated Remote Code Execution

Gitlab-CVE-2021-22205Exploit

Unauthenticated remote code execution exploit for GitLab versions < 13.10.3, leveraging ExifTool DjVu annotation parsing to execute arbitrary commands via crafted image uploads.

CVEPoC

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

ExifTool 12.23 - Arbitrary Code ExecutionExploit

UNICORD · linux · May 11, 2022