Lucene search

MitreCVE-2022-34983

HistoryJul 22, 2022 - 3:15 p.m.

CVE-2022-34983

2022-07-2215:15:08

mitre

web.nvd.nist.gov

cve-2022-34983

scu-captcha

pypi

code execution

backdoor

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.

Affected configurations

Nvd

Node

scu-captcha_projectscu-captchaRange0.0.1–0.0.4pypi

VendorProductVersionCPE
scu-captcha_projectscu-captcha*cpe:2.3:a:scu-captcha_project:scu-captcha:*:*:*:*:*:pypi:*:*

Vendor	Product	Version	CPE
scu-captcha_project	scu-captcha	*	cpe:2.3:a:scu-captcha_project:scu-captcha::::::pypi::*

References

pypi.doubanio.com/simple/request

github.com/SunnyHaze/SCU-Captcha/issues/1

pypi.org/project/scu-captcha/

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

68.4%

JSON

Related for CVE-2022-34983