sonatype-2024-2066 | Security Details | Sonatype Guide

sonatype-2024-2066

Data Exfiltration Malicious Packages - 10 Jun 2024

Published Jun 11, 2024

OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV
OSV

Security Details

Components Impacted

Sonatype Research

sonatype-2024-2066 Security Details

CVE ID: sonatype-2024-2066
CVE Description: Data Exfiltration Malicious Packages - 10 Jun 2024
Published: Jun 11, 2024
CVSS Score & Severity: 7.1 High
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS Score: 0%
Malware: malware
KEV Status: Not in KEV Catalog: No known exploits
Affected Ecosystems: affected
Source: Sonatype

References