exploitDog

CVE-2022-42043

Опубликовано: 11 окт. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.

Ссылки

https://github.com/dadadadada111/info/issues/5
Exploit
Issue Tracking
Third Party Advisory
https://pypi.org/project/d8s-xml/
Product
Third Party Advisory
https://pypi.org/project/democritus-html/
Product
Third Party Advisory
https://github.com/dadadadada111/info/issues/5
Exploit
Issue Tracking
Third Party Advisory
https://pypi.org/project/d8s-xml/
Product
Third Party Advisory
https://pypi.org/project/democritus-html/
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:democritus:d8s-xml:0.1.0:*:*:*:*:python:*:*

EPSS

Процентиль: 32%

0.00123

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-24vj-6vgj-xpcx

CVSS3: 9.8

github

почти 3 года назад

The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.

EPSS

Процентиль: 32%

0.00123

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

CWE-434