EUVD-2023-24408

Malicious code in bioql PyPI...

The vulnerability of the CryptoService function in software for monitoring the status of devices connected to a network allows a hacker to modify arbitrary files.

The vulnerability of the CryptoService function in software for monitoring the status of devices connected to a network, Cisco Duo Device Health, is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to modify...