CVE-2022-33002

Published June 24th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECTS

Description

The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

kgexplore

Python Package for Knowledge Exploration

Python Package Index

smoothnlp/KGExplore

公开的知识图谱探索项目

GitHub