Code injection

2022-06-0820:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code (remote). When installing the pyanxdns package of version 0.2, the request package will be installed.

CPENameOperatorVersion
pyanxdnseq0.2

CPE	Name	Operator	Version
	pyanxdns	eq	0.2

References

pypi.doubanio.com/simple/request

github.com/egeback/pyanxdns/issues/1

pypi.org/project/pyanxdns/