Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-50447
HistoryJan 19, 2024 - 8:15 p.m.

CVE-2023-50447

2024-01-1920:15:11
Debian Security Bug Tracker
security-tracker.debian.org
9
pillow imagemath arbitrarycodeexecution unix environmentparameter vulnerability

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).