Lucene search

K
cvelistMitreCVELIST:CVE-2014-1933
HistoryApr 17, 2014 - 2:00 p.m.

CVE-2014-1933

2014-04-1714:00:00
mitre
raw.githubusercontent.com
2

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes.

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%