Lucene search

K
cvelistMitreCVELIST:CVE-2021-25292
HistoryMar 19, 2021 - 3:30 a.m.

CVE-2021-25292

2021-03-1903:30:39
mitre
www.cve.org
9
pillow
pdf
vulnerability
regex
attack
cve-2021-25292

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

44.0%

An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex.