CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code (remote). When installing the pyanxdns package of version 0.2, the request package will be installed.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-06-08

Last modified

2024-08-03

Affected products

• Pyanxdns (Pyanxdns Project)

References

• http://pypi.doubanio.com/simple/request
• https://github.com/egeback/pyanxdns/issues/1
• https://pypi.org/project/pyanxdns/