The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-06-24T20:39:48
Updated: 2024-08-03T08:16:16.553Z
Reserved: 2022-06-20T00:00:00
Link: CVE-2022-34055
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-06-24T21:15:08.550
Modified: 2024-11-21T07:08:50.780
Link: CVE-2022-34055
Redhat
No data.