2 matches found
CVE-2022-34054
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
9.8CVSS7.7AI score0.01943EPSS
SaveExploits1References1
CVE-2022-34054
The CVE-2022-34054 entry concerns the Perdido package on PyPI (versions 0.0.1–0.0.2) that allegedly contains a code execution backdoor introduced via the request package. Reported impact in sources includes access to sensitive user information and digital currency keys, with privilege escalation....
9.8CVSS9.7AI score0.01943EPSS
SaveExploits1References3Affected Software1
20