CVE-2022-32997

2022-06-2420:39:39

mitre

www.cve.org

pypi package

code execution

backdoor

sensitive information

digital currency keys

privilege escalation

EPSS

0.004

Percentile

74.0%

JSON

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.