PT-2022-37409

Published

2022-07-22

·

Updated

2022-07-22

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions wikifaces package in PyPI version 1.0
Description The issue concerns a code execution backdoor that was inserted by a third party into the wikifaces package available on PyPI. This backdoor allows for unauthorized code execution.
Recommendations For wikifaces package in PyPI version 1.0, avoid using this version due to the presence of a code execution backdoor. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
PYSEC-2022-43173
Found an issue in the description? Have something to add? Feel free to write us 👾