ZeroHour

CVE-2022-33002

PoC
CVSS 3.1
9.8 critical
EPSS
2%p80
Published
()
Modified
Description

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Vendors
pypi
Products
explore
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.