PT-2022-21996
CVE-2022-34064
·
تاريخ النشر
2022-06-24
·
تاريخ التحديث
2022-07-06
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zibal package in PyPI version 1.0.0
Description
The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges due to a code execution backdoor.
Recommendations
For Zibal package in PyPI version 1.0.0, consider removing or avoiding the use of this package until a secure version is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾