Information Disclosure

2022-06-2708:59:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

dr_web_engine

code injection

sensitive user info

digital currency keys

software vulnerability

EPSS

0.004

Percentile

74.8%

JSON

dr_web_engine is vulnerable to information disclosure. An attacker can inject and execute malicious code through the request package and gain access to sensitive user information and digital currency keys.

References

pypi.doubanio.com/simple/request

github.com/advisories/GHSA-cwp2-chgw-mwq8

github.com/ylliprifti/dr-web-engine/commit/cc8774c3e75e459300f16100d9cbadad1aea0882

github.com/ylliprifti/dr-web-engine/issues/4

pypi.org/project/dr-web-engine/

EPSS

0.004

Percentile

74.8%

JSON

Related for VERACODE:36157