Lucene search
Veracode Vulnerability DatabaseVERACODE:43522HistoryOct 03, 2023 - 9:23 a.m.
Arbitrary Code Injection
2023-10-0309:23:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
pretix
arbitrary code injection
eps
vulnerability
software
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.7%
pretix is vulnerable to Arbitrary Code Injection. The vulnerability is caused by allowing parsing of EPS (Encapsulated PostScript) files in various features of the application. An attacker can exploit this to execute arbitrary code by sending a specially crafted EPS file.
Related
nvd
nvd
CVE-2023-44464
2023-09-29 05:15:46
cvelist
cvelist
CVE-2023-44464
2023-09-29 00:00:00
osv
osv
CVE-2023-44464
2023-09-29 05:15:46
pretix allows Pillow to parse EPS files
2023-09-29 06:30:29
prion
prion
Code injection
2023-09-29 05:15:00
github
github
pretix allows Pillow to parse EPS files
2023-09-29 06:30:29
vulnrichment
vulnrichment
CVE-2023-44464
2023-09-29 00:00:00
cve
cve
CVE-2023-44464
2023-09-29 05:15:46
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
19.7%
Related for VERACODE:43522