Vulnerability Description
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Democritus Urls Project | Democritus Urls | 0.1.0 |
References
- https://github.com/democritus-project/d8s-urls/issues/10ExploitIssue TrackingThird Party Advisory
- https://pypi.org/project/democritus-hypothesis/Not Applicable
- https://github.com/democritus-project/d8s-urls/issues/10ExploitIssue TrackingThird Party Advisory
- https://pypi.org/project/democritus-hypothesis/Not Applicable
FAQ
What is CVE-2022-40805?
CVE-2022-40805 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the demo...
How severe is CVE-2022-40805?
CVE-2022-40805 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-40805?
Check the references section above for vendor advisories and patch information. Affected products include: Democritus Urls Project Democritus Urls.