CVE-2022-24303
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
pillow
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"9.0.1"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-24303 py3-pillow Corrigé dans: 8.4.0-r3
- Debian DEBIAN-CVE-2022-24303 pillow Corrigé dans: 8.1.2+dfsg-0.3+deb11u3
Références
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory security.gentoo.org
- advisory nvd.nist.gov
- advisory github.com
- patch github.com
- web pillow.readthedocs.io