CVE-2022-46997

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-12-14 · updated 2026-06-17
Weakness: CWE-912

Description

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Affected products

Passhunt Project Passhunt: all versions

References

https://github.com/Viralmaniar/Passhunt/
https://github.com/Viralmaniar/Passhunt/issues/14
https://mirrors.neusoft.edu.cn/pypi/web/simple/request/
https://github.com/Viralmaniar/Passhunt/
https://github.com/Viralmaniar/Passhunt/issues/14
https://mirrors.neusoft.edu.cn/pypi/web/simple/request/

Get alerted when CVE-2022-46997 or the next vulnerability affects your stack