CVE-2021-25290

Risk Scores

Affected Products

Exploit Intelligence

• CIRCL seen: CVE-2021-25290 (circl-sighting)
• https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html (circl)
• GLSA-202107-33 (circl)
• [debian-lts-announce] 20210722 [SECURITY] [DLA 2716-1] pillow security update (circl)

Timeline

• Mar 3, 2021 CVE Published
• Mar 19, 2021 PoC Published
• Apr 14, 2021 EPSS Score
• Jun 23, 2021 EPSS Score
• Aug 24, 2021 EPSS Score
• Dec 27, 2021 EPSS Score
• Jan 6, 2022 EPSS Score
• Feb 4, 2022 EPSS Score
• Feb 28, 2022 EPSS Score
• Apr 1, 2022 EPSS Score
• Jul 3, 2022 EPSS Score
• Sep 4, 2022 EPSS Score

References

• ALAS2-2023-2087: python-pillow (medium) advisory