CVE-2022-34065 - The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor

Back Back to CVE browser

CRITICAL

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor

Published Jun 24, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.08%

Description

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://pypi.doubanio.com/simple/request
x_refsource_MISCNot Applicable
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0409
Advisory
https://github.com/rondolu/project-yt-concate/issues/1
x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://pypi.org/project/rondolu-yt-concate/
x_refsource_MISCProductThird Party Advisory

Link	Providers	Tags
http://pypi.doubanio.com/simple/request		x_refsource_MISCNot Applicable
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0409		Advisory
https://github.com/rondolu/project-yt-concate/issues/1		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://pypi.org/project/rondolu-yt-concate/		x_refsource_MISCProductThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 24, 2022

Updated Aug 3, 2024

Reserved Jun 20, 2022

Link CVE-2022-34065

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-34065

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 24, 2022

Updated Aug 3, 2024

Link EUVD-2022-0409

GitHub

No data