[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDO7Ldv0kpP_FZGQ8fNgtAZ3A3MS-LVZ5X_nnd5mer8M":3,"g5a-risk:CVE-2022-22817":146},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":63,"references":64,"referencesCount":90,"weaknesses":91,"weaknessesCount":95,"isActivelyExploited":96,"cisaInfo":27,"otxData":27,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":142,"notableEvents":143},"CVE-2022-22817","What is CVE-2022-22817?","PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used.","PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could...","2022-01-10T14:12:55.16","2024-10-15T21:35:25.423",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":25,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03334,[43,43,43,43,43,43,43],"Critical",[47,52,57,60],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"python","pillow","*","cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":58,"criteria":59,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":61,"criteria":62,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",4,[65,71,74,80,83,87],{"url":66,"source":67,"tags":68},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F01\u002Fmsg00018.html","Debian",[69,70],"Mailing List","Third Party Advisory",{"url":72,"source":67,"tags":73},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F03\u002Fmsg00021.html",[],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F9.0.0.html#restrict-builtins-available-to-imagemath-eval","Readthedocs",[78,79],"Release Notes","Vendor Advisory",{"url":81,"source":76,"tags":82},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F9.0.1.html#security",[78,79],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202211-10","Gentoo",[70],{"url":88,"source":67,"tags":89},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2022\u002Fdsa-5053",[70],6,[92],{"id":93,"name":93,"description":94},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2022-22817? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22817, a critical severity cyber security vulnerability from 2022. PIL.ImageMath.eval in Pillow before 9.0.0 allows evalua...","CVE-2022-22817, CVE-2022-22817 vulnerability, CVE-2022-22817 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, python security, debian security, pillow vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2022-22817",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22817","Cybersecurity","CVE-2022-22817, CVE-2022-22817 vulnerability, CVE-2022-22817 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124,132],{"Operator":27,"Negate":27,"Nodes":125},[126],{"Operator":127,"Negate":27,"CPEMatch":128},"OR",[129],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":131,"VersionEndIncluding":27},"247E74B8-CE5D-4409-B0F2-4F76D7C0EC99","9.0.1",{"Operator":27,"Negate":27,"Nodes":133},[134],{"Operator":127,"Negate":27,"CPEMatch":135},[136,138,140],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[],{"lastModified":11,"cacheTime":145,"version":37},1792247291557,{"score":147,"band":148,"action":149,"scoredAt":150},55,"Medium","Plan remediation","2026-10-16T06:52:56.394759+00:00"]