Code injection

2022-06-2421:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

JSON

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.

CPENameOperatorVersion
pyesaskyge1.2.0
pyesaskyle1.4.2

CPE	Name	Operator	Version
	pyesasky	ge	1.2.0
	pyesasky	le	1.4.2

References

pypi.doubanio.com/simple/request

github.com/esdc-esac-esa-int/pyesasky/issues/39

pypi.org/project/pyesasky/