CVE-2022-33001

Published June 24th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECTS

Description

The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

AAmiles

Check changes in the miles required to obtain a ticket from the AA web page

Python Package Index

bOrionis/AAmiles

scan for changes in miles AA table

GitHub