CVE-2022-32997: Critical severity pypi rootinteractive vulnerability
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32997?
CVE-2022-32997 has a high severity rating due to its potential for code execution and sensitive data exposure.
How do I fix CVE-2022-32997?
To fix CVE-2022-32997, upgrade the RootInteractive package to version 0.0.19b1 or later.
What vulnerabilities does CVE-2022-32997 exploit?
CVE-2022-32997 exploits vulnerabilities within the RootInteractive package by leveraging a backdoor in the request package.
What are the potential impacts of CVE-2022-32997 on my system?
CVE-2022-32997 may lead to unauthorized code execution, disclosure of sensitive user information, and privilege escalation.
Which versions of the RootInteractive package are affected by CVE-2022-32997?
CVE-2022-32997 affects the RootInteractive package versions 0.0.5 through 0.0.19b0.