PT-2022-3395
CVE-2022-30882
·
تاريخ النشر
2022-06-08
·
تاريخ التحديث
2022-06-15
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
pyanxdns version 0.2
Description
The issue is related to the presence of a malicious dependency
request in the pyanxdns package. This allows a remote attacker to execute arbitrary code. When the pyanxdns package version 0.2 is installed, the request package is also installed, leading to the vulnerability.Recommendations
For pyanxdns version 0.2, consider uninstalling the
request package to mitigate the risk of code execution. As a temporary workaround, avoid using the pyanxdns package until a patched version is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾