CVE-2022-46609 Supply chain in n/a
Attackers can execute code, escalate privileges, and steal sensitive data via a backdoor in the request package dependency.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-46609?
CVE-2022-46609 is a critical vulnerability in n/a, published on 14 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
Which versions are affected by CVE-2022-46609?
It affects 1 product.
Products include Python3-Restfulapi Project Python3-Restfulapi.
How do I fix CVE-2022-46609?
No fix has been published for CVE-2022-46609 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-46609 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-46609 exists.
Sources
Also known as GHSA-j5rg-4wj9-7v6m.