Lucene search

CVE-2023-50447

🗓️ 19 Jan 2024 20:11:15Reported by mitreType

Pillow 10.1.0 allows Arbitrary Code Execution via environment paramete

Reporter	Title	Published	Views	Family All 199
Tenable Nessus	openSUSE 15 Security Update : python-Pillow (SUSE-SU-2024:0185-1)	24 Jan 202400:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : python-Pillow (openSUSE-SU-2024:0125-1)	14 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Pillow (SUSE-SU-2024:0205-1)	25 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2024-1495)	8 Apr 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2024-512)	6 Feb 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : python-pillow (EulerOS-SA-2024-1617)	15 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2024-1247)	12 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2024-1636)	15 May 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-pillow (ALAS-2024-2444)	6 Feb 202400:00	–	nessus
Tenable Nessus	Debian dla-3724 : python-pil - security update	30 Jan 202400:00	–	nessus

Nvd

Node

python pillowRange≤10.1.0

Node

debian debian_linuxMatch10.0

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2024/01/msg00019.html
github	www.github.com/python-pillow/Pillow/releases
devhub	www.devhub.checkmarx.com/cve-details/CVE-2023-50447/
openwall	www.openwall.com/lists/oss-security/2024/01/20/1
duartecsantos	www.duartecsantos.github.io/2024-01-02-CVE-2023-50447/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jan 2024 20:15Current

9.0High risk

Vulners AI Score9.0

CVSS38.1

EPSS0.004