Exotel
1 CVEs
product
Monthly
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
RCE
Exotel
NVD
GitHub
CVSS 3.1
9.8
EPSS
1.2%
CVE-2022-38792
PyPI
EPSS 1%
CVSS 9.8
CRITICAL
PATCH
Act Now
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
RCE
Exotel
NVD
GitHub