Lucene search

K
cvelistMitreCVELIST:CVE-2023-50447
HistoryJan 19, 2024 - 12:00 a.m.

CVE-2023-50447

2024-01-1900:00:00
mitre
www.cve.org
pillow
pil.imagemath.eval
arbitrary code execution

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).