PT-2022-37407
تاريخ النشر
2022-06-24
·
تاريخ التحديث
2022-06-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Togglee package in PyPI version v0.0.8
Description
The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges due to a code execution backdoor in the Togglee package.
Recommendations
For Togglee package in PyPI version v0.0.8, consider removing or avoiding the use of this version until a fixed version is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾