Lucene search
MitreCVE-2023-44464HistorySep 29, 2023 - 5:15 a.m.
CVE-2023-44464
2023-09-2905:15:46
mitre
web.nvd.nist.gov
37
pretix
security vulnerability
cve-2023-44464
eps
pillow
nvd
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
19.7%
pretix before 2023.7.2 allows Pillow to parse EPS files.
Affected configurations
Node
ramipretixRange<4.20.4
ORramipretixRange2023.6.0–2023.6.3
ORramipretixRange2023.7.0–2023.7.2
Related
nvd
nvd
CVE-2023-44464
2023-09-29 05:15:46
cvelist
cvelist
CVE-2023-44464
2023-09-29 00:00:00
prion
prion
Code injection
2023-09-29 05:15:00
osv
osv
CVE-2023-44464
2023-09-29 05:15:46
pretix allows Pillow to parse EPS files
2023-09-29 06:30:29
veracode
veracode
Arbitrary Code Injection
2023-10-03 09:23:28
github
github
pretix allows Pillow to parse EPS files
2023-09-29 06:30:29
vulnrichment
vulnrichment
CVE-2023-44464
2023-09-29 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
High
EPSS
0.001
Percentile
19.7%
Related for CVE-2023-44464