Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxf7-mjm7-qcvc

Опубликовано: 07 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.

EPSS

Процентиль: 65%
0.00491
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.

EPSS

Процентиль: 65%
0.00491
Низкий

8.8 High

CVSS3

Дефекты

CWE-434