
CVE-2021-22205 exploit script
Preauth RCE via exiftool on Gitlab CE/EE
GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which allows an attacker to upload any file, rename it to tiff/jpeg/jpg and "abuse" any of the ExifTool supported parsers. When parsing DjVu files ExifTool evals DjVu annotation tokens to convert C escape sequences.
Uploads a image file to the server.