CVE-2022-46997

Summary

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://mirrors.neusoft.edu.cn/pypi/web/simple/request/
• https://github.com/Viralmaniar/Passhunt/
• https://github.com/Viralmaniar/Passhunt/issues/14

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://mirrors.neusoft.edu.cn/pypi/web/simple/request/
• https://github.com/Viralmaniar/Passhunt/
• https://github.com/Viralmaniar/Passhunt/issues/14

• ←Previous
• Next→