En resumen
- CVE-2014-3429 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a ipython, ipython notebook (ipython).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.7%, mayor que el 91.8% de las vulnerabilidades.
- Solución: actualizar a 1.2.0 o posterior.
| Package | Affected versions | Patched versions |
|---|
| ipython PyPI | ≥ 0.12, < 1.2.0
| 1.2.0
|
| ipython notebook | = 0.12= 0.12.1= 0.13= 0.13.1= 0.13.2= 1.0.0= 1.1.0
| No fix yet |
Description
IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
NVD description
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free