Junglewise Threat Intelligence

CVE-2022-38792: PYSEC-2022-43134 - The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.

CVE-2022-38792 · Severity: low · CVSS 3.1 · Published 2022-08-27

Technologies: exotel (PyPI). Vendors: PyPI.

Executive brief

The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.

Affected products

PyPI exotel

Related threats

`exotel` project on PyPI compromised, malicious release made
PYSEC-2022-250 - The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained