Kurz gesagt
- CVE-2014-3429 ist eine Schwachstelle (MITTEL (CVSS 6.8)) in ipython, ipython notebook (ipython).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.7%, höher als bei 91.8% aller Schwachstellen.
- Abhilfe: auf 1.2.0 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| ipython PyPI | ≥ 0.12, < 1.2.0
| 1.2.0
|
| ipython notebook | = 0.12= 0.12.1= 0.13= 0.13.1= 0.13.2= 1.0.0= 1.1.0
| No fix yet |
Description
IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
NVD description
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free