CVE-2022-30885

CVE-2022-30885

EPSS 2.0%

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://pypi.doubanio.com/simple/request https://github.com/esdc-esac-esa-int/pyesasky/issues/39 https://pypi.org/project/pyesasky/