CVE-2022-34054

2022-06-2420:39:48

mitre

www.cve.org

perdido package

pypi

code execution

backdoor

vulnerability

sensitive information

digital currency keys

privilege escalation

EPSS

0.004

Percentile

74.0%

JSON

The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.