sonatype-2022-4350 | Security Details | Sonatype Guide

sonatype-2022-4350

Malicious Packages (Ransomware) - Jul 28 2022

Published Jul 28, 2022

help.sonatype.com OSV

CVSS Score: Critical 10.0

Security Details

Components Impacted

CVE ID: sonatype-2022-4350
CWE: N/A
CVE Description: Malicious Packages (Ransomware) - Jul 28 2022
Published: Jul 28, 2022
CVSS Score & Severity: 10.0 Critical
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score: 0%
Malware: malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

Source: Sonatype

References