CVE-2022-30885

Advisory

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The affected versions are 1.2.0-1.4.2.
https://github.com/esdc-esac-esa-int/pyesasky/issues/39

Affected package

Affected versions

Fixed versions

Vulnerability changelog

The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2. See CVE-2022-30885.


MISC:http://pypi.doubanio.com/simple/request: http://pypi.doubanio.com/simple/request
MISC:https://github.com/esdc-esac-esa-int/pyesasky/issues/39: https://github.com/esdc-esac-esa-int/pyesasky/issues/39
MISC:https://pypi.org/project/pyesasky/: https://pypi.org/project/pyesasky/

Resources

• http://pypi.doubanio.com/simple/request
• https://github.com/esdc-esac-esa-int/pyesasky/issues/39
• https://pypi.org/project/pyesasky/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30885