Home > Vulnerability Database > CVE-2023-44464

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2023-44464

Good to know:

Date: September 28, 2023

pretix before 2023.7.2 allows Pillow to parse EPS files.

Language: Python

Severity Score

7.8

Related Resources (9)

Url: https://github.com/pretix/pretix/commit/8583bfb7d97263e9e923ad5d7f123ca1cadc8f2e

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-44464

Url: https://github.com/pretix/pretix/compare/v2023.7.1...v2023.7.2

Url: https://github.com/pretix/pretix

Url: https://pretix.eu/about/en/ticketing

Url: https://pretix.eu/about/de/blog/20230912-release-2023-7-2/

Url: https://pretix.eu/about/de/blog/20230912-release-2023-7-2

Url: https://github.com/pretix/pretix/tags

Url: https://www.mend.io/vulnerability-database/CVE-2023-44464

Severity Score

7.8

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

Upgrade Version

Upgrade to version pretix - 4.20.3,2023.7.3

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us