CVE-2022-40426

The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
References
Link Resource
https://github.com/democritus-project/d8s-asns/issues/8 Exploit Issue Tracking Third Party Advisory
https://pypi.org/project/democritus-networking/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:d8s-asns_project:d8s-asns:0.1.0:*:*:*:*:python:*:*

History

No history.

Information

Published : 2022-09-19 16:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-40426

Mitre link : CVE-2022-40426

CVE.ORG link : CVE-2022-40426


JSON object : View

Products Affected

d8s-asns_project

  • d8s-asns