PRIOn knowledge basePRION:CVE-2023-44464

HistorySep 29, 2023 - 5:15 a.m.

Code injection

2023-09-2905:15:00

PRIOn knowledge base

www.prio-n.com

pretix

pillow

eps files

vulnerability

nvd

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

pretix before 2023.7.2 allows Pillow to parse EPS files.

CPENameOperatorVersion
pretixge2023.7.0
pretixlt2023.7.2
pretixge2023.6.0
pretixlt2023.6.3
pretixlt4.20.4

Name	Operator	Version
pretix	ge	2023.7.0
pretix	lt	2023.7.2
pretix	ge	2023.6.0
pretix	lt	2023.6.3
pretix	lt	4.20.4

References

github.com/pretix/pretix/commit/8583bfb7d97263e9e923ad5d7f123ca1cadc8f2e

github.com/pretix/pretix/compare/v2023.7.1...v2023.7.2

github.com/pretix/pretix/tags

pretix.eu/about/de/blog/20230912-release-2023-7-2/

pretix.eu/about/en/ticketing