Lucene search
MitreVULNRICHMENT:CVE-2023-50447HistoryJan 19, 2024 - 12:00 a.m.
CVE-2023-50447
2024-01-1900:00:00
mitre
github.com
5
pillow imagemath eval environment arbitrarycodeexecution cve-2023-50447
AI Score
7.3
Confidence
Low
EPSS
0.003
Percentile
72.1%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*"
],
"vendor": "python",
"product": "pillow",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "10.1.0"
}
],
"defaultStatus": "unknown"
}
]Related
openvas
openvas
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1617)
2024-05-15 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1577)
2024-05-10 00:00:00
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1774)
2024-05-30 00:00:00
debiancve
debiancve
CVE-2023-50447
2024-01-19 20:15:11
CVE-2022-22817
2022-01-10 14:12:55
nessus
nessus
openSUSE 15 Security Update : python-Pillow (SUSE-SU-2024:0185-1)
2024-01-24 00:00:00
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2024-1495)
2024-04-08 00:00:00
openSUSE 15 Security Update : python-Pillow (openSUSE-SU-2024:0125-1)
2024-05-14 00:00:00
github
github
Arbitrary Code Execution in Pillow
2024-01-19 21:30:35
Arbitrary expression injection in Pillow
2022-01-12 20:07:33
nvd
nvd
CVE-2023-50447
2024-01-19 20:15:11
CVE-2022-22817
2022-01-10 14:12:55
alpinelinux
alpinelinux
CVE-2023-50447
2024-01-19 20:15:11
CVE-2022-22817
2022-01-10 14:12:55
f5
f5
K000138866 : Python Pillow vulnerability CVE-2023-50447
2024-03-09 00:00:00
K23413369 : Python-Pillow vulnerabilities CVE-2022-22816, CVE-2022-22817
2022-05-06 00:00:00
osv
osv
BIT-pillow-2023-50447
2024-03-06 11:01:31
CVE-2023-50447
2024-01-19 20:15:11
Arbitrary Code Execution in Pillow
2024-01-19 21:30:35
mageia
mageia
Updated python-pillow packages fix a security vulnerability
2024-01-30 23:57:03
Updated python-pillow packages fix security vulnerability
2022-05-12 13:24:45
prion
prion
Code injection
2024-01-19 20:15:00
Design/Logic Flaw
2022-01-10 14:12:00
amazon
amazon
Important: python-pillow
2024-02-01 19:57:00
Important: python-pillow
2022-04-25 22:58:00
Important: python-pillow
2022-04-25 22:58:00
ubuntucve
ubuntucve
CVE-2023-50447
2024-01-19 00:00:00
CVE-2022-22817
2022-01-10 00:00:00
cvelist
cvelist
CVE-2023-50447
2024-01-19 00:00:00
CVE-2022-22817
2022-01-07 00:00:00
cve
cve
CVE-2023-50447
2024-01-19 20:15:11
CVE-2022-22817
2022-01-10 14:12:55
ibm
ibm
redhat
redhat
(RHSA-2024:1059) Important: python-pillow security update
2024-02-29 17:11:25
(RHSA-2024:1058) Important: python-pillow security update
2024-02-29 17:11:17
(RHSA-2024:0857) Important: python-pillow security update
2024-02-19 00:59:20
veracode
veracode
Information Dislcosure
2022-01-11 08:52:21
Arbitrary Code Execution
2024-01-23 09:46:39
redos
redos
ROS-20240411-05
2024-04-11 00:00:00
ROS-20220128-02
2022-01-28 00:00:00
almalinux
almalinux
Important: python-pillow security update
2024-02-20 00:00:00
Important: python-pillow security update
2022-02-22 17:25:31
cgr
cgr
CVE-2023-50447 vulnerabilities
2024-05-19 03:07:16
centos
centos
python security update
2024-02-21 14:47:57
python security update
2022-02-25 15:38:05
wolfi
wolfi
CVE-2023-50447 vulnerabilities
2024-09-07 09:11:18
oraclelinux
oraclelinux
python-pillow security update
2024-02-18 00:00:00
python-pillow security update
2024-02-20 00:00:00
python-pillow security update
2022-02-23 00:00:00
redhatcve
redhatcve
CVE-2023-50447
2024-01-22 05:30:54
CVE-2022-22817
2022-01-19 16:52:40
debian
debian
[SECURITY] [DLA 3724-1] pillow security update
2024-01-29 20:03:58
[SECURITY] [DSA 5704-1] pillow security update
2024-06-05 18:59:18
[SECURITY] [DLA 2893-1] pillow security update
2022-01-23 18:58:26
cnvd
cnvd
Pillow input validation error vulnerability
2022-01-14 00:00:00
ubuntu
ubuntu
Pillow vulnerabilities
2024-01-30 00:00:00
Pillow vulnerabilities
2022-01-13 00:00:00
Pillow vulnerability
2022-10-24 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2392
2024-04-11 07:13:20
gentoo
gentoo
Pillow: Multiple Vulnerabilities
2024-05-05 00:00:00
rocky
rocky
python-pillow security update
2022-02-22 17:25:31
fedora
fedora
[SECURITY] Fedora 34 Update: mingw-python-pillow-8.1.2-5.fc34
2022-02-04 01:23:01
[SECURITY] Fedora 35 Update: python-pillow-8.3.2-2.fc35
2022-02-04 01:23:32
[SECURITY] Fedora 35 Update: mingw-python-pillow-8.3.2-2.fc35
2022-02-04 01:23:32
AI Score
7.3
Confidence
Low
EPSS
0.003
Percentile
72.1%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-50447