Unscored CVE-2022-34066 EUVD-2022-37086GHSA-qfqx-fv7m-hffp

The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to…

Published Jun 24, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

References

http://pypi.doubanio.com/simple/request
https://pypi.org/project/texercise/
https://github.com/rasmushaugaard/texercise-cli/issues/1