CVE-2022-30882

2022-06-0819:05:48

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code (remote). When installing the pyanxdns package of version 0.2, the request package will be installed.

References

pypi.doubanio.com/simple/request

github.com/egeback/pyanxdns/issues/1

pypi.org/project/pyanxdns/