CVE-2022-35411
2 advisories.
PyPI/rpc-py CVE-2022-35411: critical 9.8, EPSS 45.72%
rpc.py vulnerable to Deserialization of Untrusted Data
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.2 | - | 0.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8rq8-f485-7v8x
- https://nvd.nist.gov/vuln/detail/CVE-2022-35411
- https://github.com/abersheeran/rpc.py/issues/22
- https://github.com/abersheeran/rpc.py/commit/491e7a841ed9a754796d6ab047a9fb16e23bf8bd
- https://github.com/abersheeran/rpc.py
- https://github.com/ehtec/rpcpy-exploit
- https://medium.com/%40elias.hohl/remote-code-execution-0-day-in-rpc-py-709c76690c30
- https://medium.com/@elias.hohl/remote-code-execution-0-day-in-rpc-py-709c76690c30
- http://packetstormsecurity.com/files/167872/rpc.py-0.6.0-Remote-Code-Execution.html
CVE-2022-35411 · published · modified · JSON
PyPI/rpc-py CVE-2022-35411: critical 9.8, EPSS 45.72%
rpc.py vulnerable to Deserialization of Untrusted Data
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.2 | - | 0.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-526
- https://nvd.nist.gov/vuln/detail/CVE-2022-35411
- https://github.com/abersheeran/rpc.py/issues/22
- https://github.com/abersheeran/rpc.py/commit/491e7a841ed9a754796d6ab047a9fb16e23bf8bd
- https://github.com/abersheeran/rpc.py
- https://github.com/ehtec/rpcpy-exploit
- https://medium.com/%40elias.hohl/remote-code-execution-0-day-in-rpc-py-709c76690c30
- https://medium.com/@elias.hohl/remote-code-execution-0-day-in-rpc-py-709c76690c30
- http://packetstormsecurity.com/files/167872/rpc.py-0.6.0-Remote-Code-Execution.html
- https://pypi.org/project/rpc-py
- https://github.com/advisories/GHSA-8rq8-f485-7v8x
CVE-2022-35411 · published · modified · JSON