CVE-2022-34056

Published June 24th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECTS

Description

The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

watertools

Tools for data collecting and data processing of remote sensed data.

Python Package Index

WaterSat/watertools

Tools for data collecting and data processing of remote sensed data

GitHub