34 matches found
Arbitrary Code Execution in Pillow
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter...
9.8CVSS6.9AI score0.03399EPSS
SaveExploits0References12Affected Software1
20