PYSEC-2022-215

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/ml-scanner/PYSEC-2022-215.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2022-215

Aliases

CVE-2022-33000

Published

2022-06-24T21:15:00Z

Modified

2023-11-08T04:09:38.497807Z

Summary

[none]

Details

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

References

https://pypi.org/project/ml-scanner/
http://pypi.doubanio.com/simple/request
https://github.com/bOrionis/mls/issues/1

Affected packages

PyPI / ml-scanner

Package

Name: ml-scanner; View open source insights on deps.dev
Purl: pkg:pypi/ml-scanner

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.1.0

Fixed

0.1.7

Affected versions

0.*

0.1.0

0.1.1

0.1.2

0.1.3

0.1.4

0.1.5

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/ml-scanner/PYSEC-2022-215.yaml"