CVE-2022-34053

Published June 24th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECTS

Description

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

dr-web-engine

A data retrieval engine based on Playwright.

Python Package Index

ylliprifti/dr-web-engine

A python implementation of oxpath for web data retrieval

GitHub