CVEs-PoC/2022/CVE-2022-22817.md

CVE-2022-22817

Description

PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. A lambda expression could also be used.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/JawadPy/CVE-2022-22817
• https://github.com/JawadPy/CVE-2022-22817-Exploit
• https://github.com/NaInSec/CVE-LIST
• https://github.com/SaintsConnor/Exploits
• https://github.com/nomi-sec/PoC-in-GitHub