CVE-2022-30885

2022-06-2420:41:10

mitre

www.cve.org

pyesasky python code-execution backdoor

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

75.9%

JSON

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.

References

pypi.doubanio.com/simple/request

github.com/esdc-esac-esa-int/pyesasky/issues/39

pypi.org/project/pyesasky/