CVE-2022-46997

Critical

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This…

mitre·NVD-CWE-noinfo·Published 2022-12-14

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

265 chars

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

NVDen

265 chars

NVDes

320 chars

Se descubrió que la confirmación de Passhunt 54eb987d30ead2b8ebbf1f0b880aa14249323867 contenía una puerta trasera de ejecución de código a través del paquete de solicitud. Esta vulnerabilidad permite a los atacantes acceder a información confidencial del usuario y claves de moneda digital, así como escalar privilegios.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H