BIT-pillow-2022-22817

🗓️ 06 Mar 2024 11:31:02Reported by GoogleType

osv🔗 osv.dev👁 17 Views

Pillow vulnerability allows evaluation of arbitrary expression

Reporter	Title	Published	Views	Family All 176
Cvelist	CVE-2022-22817	7 Jan 202200:00	–	cvelist
Cvelist	CVE-2023-50447	19 Jan 202400:00	–	cvelist
Veracode	Information Dislcosure	11 Jan 202208:52	–	veracode
CNVD	Pillow input validation error vulnerability	14 Jan 202200:00	–	cnvd
Github Security Blog	Arbitrary expression injection in Pillow	12 Jan 202220:07	–	github
Github Security Blog	Arbitrary Code Execution in Pillow	19 Jan 202421:30	–	github
CVE	CVE-2022-22817	10 Jan 202214:12	–	cve
CVE	CVE-2023-50447	19 Jan 202420:15	–	cve
OSV	CVE-2022-22817	10 Jan 202214:12	–	osv
OSV	PYSEC-2022-10	10 Jan 202214:12	–	osv

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00018.html
pillow	www.pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html
pillow	www.pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html
security	www.security.gentoo.org/glsa/202211-10
debian	www.debian.org/security/2022/dsa-5053
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00021.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Mar 2024 11:02Current

9.4High risk

Vulners AI Score9.4

CVSS27.5

CVSS39.8

EPSS0.004