ZeroHour

CVE-2022-34055

PoC
CVSS 3.1
9.8 critical
EPSS
2%p80
Published
()
Modified
Description

The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Vendors
pypi
Products
drxhello
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.