Seal Security

CVE-2022-24303

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Vulnerability Details

Score

9.1

Score Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Affected Versions

pillow < 9.0.1

Severity

Ecosystem

Python

Publish Date

March 11, 2022

Modified Date

October 14, 2024