PYSEC-2022-219

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/rootinteractive/PYSEC-2022-219.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2022-219

Aliases

CVE-2022-32997

Published

2022-06-24T21:15:00Z

Modified

2023-11-01T04:59:09.684034Z

Summary

[none]

Details

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

References

https://github.com/miranov25/RootInteractive/issues/206
https://pypi.org/project/RootInteractive/
http://pypi.doubanio.com/simple/request

Affected packages

PyPI / rootinteractive

Package

Name: rootinteractive; View open source insights on deps.dev
Purl: pkg:pypi/rootinteractive

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.0.5

Fixed

0.0.19