View all vulnerabilities

CVE-2022-24303

Path traversal in Pillow

Description

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
9.1
Score Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected Versions
pillow < 9.0.1
Severity
Critical
Critical
Critical
Ecosystem
Python
Publish Date
March 11, 2022
Modified Date
October 14, 2024