---
id: 1379
title: "Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/vulnerability-deep-dive-gaining-rce-through-imagemagick-frans-rosen"
published_at: "2024-10-17 20:36"
tags: ["rce", "case-study", "hackerone", "vulnerability-analysis", "imagemagick", "file-upload"]
phying_url: "https://phying.com/item/1379"
lang: en
---

# Vulnerability Deep Dive: Gaining RCE Through ImageMagick With Frans Rosen

## Summary

Frans Rosén's 2018 Semrush report shows how an unpatched ImageMagick in a PDF report builder turned a logo upload feature into remote code execution - a classic document-processing case study.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-10-17 20:36
- **Original:** https://www.hackerone.com/blog/vulnerability-deep-dive-gaining-rce-through-imagemagick-frans-rosen
- **Phying News:** https://phying.com/item/1379