CVE-2022-30877

CVE-2022-30877

EPSS 2.3%

The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://pypi.doubanio.com/simple/request https://github.com/OrkoHunter/keep/issues/85 https://pypi.org/project/keep