CVE-2022-24303

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...

Path traversal in Pillow

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled...

PT-2022-6483 · Pillow +5 · Pillow +5

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 9.0.1 Description: The issue is related to the mishandling of spaces in temporary pathnames, which can be exploited by attackers to delete files. This can lead to data integrity issues and potentially cause a denial o...