CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
References
Link Resource
https://github.com/democritus-project/d8s-asns/issues/9 Exploit Issue Tracking
https://pypi.org/project/d8s-asns/ Product Third Party Advisory
https://pypi.org/project/democritus-csv/ Product Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:democritus:d8s-asns:0.1.0:*:*:*:*:pypl:*:*

Information

Published : 2022-10-11 10:15

Updated : 2022-10-13 02:35


NVD link : CVE-2022-42037

Mitre link : CVE-2022-42037

Products Affected
No products.
CWE