PT-2022-13114 · Loguru+1 · Loguru+1

Published 2022-01-25 · Updated 2026-02-24 · CVE-2022-0338

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Conda loguru versions prior to 0.5.3

Description The issue concerns the insertion of sensitive information into log files and improper privilege management in Conda loguru.

Recommendations For versions prior to 0.5.3, update to version 0.5.3 or later to resolve the issue.

Exploit

Fix

Improper Privilege Management

Insertion into Log File

Incorrect Permission

Weakness Enumeration

CWE-269

CWE-532

CWE-732

Related Identifiers

CVE-2022-0338

GHSA-39PH-WR67-J4XQ

PYSEC-2022-14

Affected Products

Debian

Loguru

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0338.json · Exploit
• 🔥 https://huntr.dev/bounties/359bea50-2bc6-426a-b2f9-175d401b1ed0 · Exploit
• https://github.com/delgan/loguru/commit/ea39375e62f9b8f18e2ca798a5c0fb8c972b7eaa · Patch
• https://osv.dev/vulnerability/CVE-2022-0338 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0338 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-0338 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-14 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0338 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0338 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-39ph-wr67-j4xq · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0338 · Vendor Advisory
• https://github.com/Delgan/loguru · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/loguru/PYSEC-2022-14.yaml · Note
• https://t.me/cveNotify/153042 · Telegram Post