VDB
ALINUX2-SA-2024%3A0010
ALINUX2-SA-2024%3A0010
PUBLISHED
CVSS 9 CRITICAL
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2023-50447: A vulnerability was found in Pillow, a popular Python imaging library. The flaw identified in the PIL.ImageMath.eval function enables arbitrary code execution by manipulating the environment parameter.
Risk Scores
CVSS 3.1
9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | python-pillow |
Timeline
- Feb 19, 2024 CVE Published
- Feb 19, 2024 CVE Updated