3 matches found
CVE-2022-33004
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
9.8CVSS7.7AI score0.01901EPSS
SaveExploits1References1
CVE-2022-33004
creationtimestamp| type| source ---|---|--- 2022-06-26 12:16:46+00:00| seen| https://t.me/cibsecurity/45130...
9.8CVSS8.7AI score0.01901EPSS
SaveExploits1References1
CVE-2022-33004
CVE-2022-33004 affects the PyPI Beginner package (v0.0.2–v0.0.4) via the request package, described as a code execution backdoor. Exploitation could grant access to sensitive user data and digital currency keys and enable privilege escalation. The incident is documented across multiple sources (N...
9.8CVSS9.7AI score0.01901EPSS
SaveExploits1References3Affected Software1
20