CVE-2022-31313: Backdoor in api-res-py
Summary
CVE-2022-31313: Backdoor in api-res-py. Affects api-res-py versions < 0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The api-res-py package is a Python package available on PyPI. It provides functionality for making API requests. The package is vulnerable to a code execution backdoor in the request package. This vulnerability allows an attacker to execute arbitrary code on a system where the vulnerable package is installed.
Vulnerability Detail
The vulnerability in the api-res-py package arises from a backdoor in the request package. This backdoor allows an attacker to execute arbitrary code by exploiting the vulnerable package. The impact of this vulnerability is severe, as it grants unauthorized access and control over the affected system. The vulnerability has a CVSS score of 9.8, indicating its criticality.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The api-res-py package is vulnerable to a code execution backdoor in the request package. This vulnerability allows an attacker to execute arbitrary code on a system where the vulnerable package is installed. It is crucial to update the package to the latest version (0.2) to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for api-res-py →
FAQ
The api-res-py package is a Python package available on PyPI. It provides functionality for making API requests.
The vulnerability allows an attacker to execute arbitrary code on a system where the vulnerable package is installed. This can lead to unauthorized access and control over the affected system.
The CVSS score of this vulnerability is 9.8, indicating its criticality.
To fix this vulnerability, update the api-res-py package to version 0.2 or later, which contains the necessary patches.
No workaround is available for this vulnerability. It is recommended to update to the patched version of the package.
