CVE-2022-32998 | BDVDB-2026-178952 Detail

Description#

The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://pypi.doubanio.com/simple/request
https://pypi.org/project/cryptoasset-data-downloader/
https://github.com/serhatci/cryptocurrency-historical-data-downloader/issues/8

Exploit#

No public exploit known

History#

Version 12022-06-24Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.