CVE:CVE-2022-24303
CNNVD:CNNVD-202202-1204
Pillow是一款基于Python的图像处理库。
Pillow 9.0.1之前版本存在输入验证错误漏洞，该漏洞源于产品的remove操作未验证用户输入数据。攻击者可通过该漏洞利用输入命令来修改或删除预期的命令。
solution:Upgrade python pillow to a higher version than 9.0.1,and avoid the version (,9.0.1); Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35