CVE-2022-24303

Published March 28th, 2022

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

6.4

MEDIUM

Affected

1

PROJECT

Description

Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.

python-pillow/Pillow

Python Imaging Library (fork)

GitHub

13.6K