The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0.
References
| Link | Resource |
|---|---|
| https://github.com/dadadadada111/info/issues/12 | Issue Tracking Third Party Advisory |
| https://github.com/dadadadada111/info/issues/12 | Issue Tracking Third Party Advisory |
| https://pypi.org/project/d8s-urls/ | Product |
| https://pypi.org/project/d8s-urls/ | Product |
| https://pypi.org/project/democritus-domains/ | Product |
| https://pypi.org/project/democritus-domains/ | Product |
Configurations
History
05 May 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/dadadadada111/info/issues/12 - Issue Tracking, Third Party Advisory | |
| References | () https://pypi.org/project/democritus-domains/ - Product | |
| References | () https://pypi.org/project/d8s-urls/ - Product |
Information
Published : 2022-11-07 15:15
Updated : 2025-05-05 19:15
NVD link : CVE-2022-44048
Mitre link : CVE-2022-44048
JSON object : View
Products Affected
democritus
- d8s-urls
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type