CVE-2022-32997 | BDVDB-2026-178951 Detail

Description#

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://pypi.doubanio.com/simple/request
https://pypi.org/project/RootInteractive/
https://github.com/miranov25/RootInteractive/issues/206

Exploit#

No public exploit known

History#

Version 12022-06-24Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.