En bref
- CVE-2014-3429 est une vulnérabilité MOYENNE (CVSS 6.8) touchant ipython, ipython notebook (ipython).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.7%, plus élevée que 91.8% des vulnérabilités.
- Correctif : mettre à jour vers 1.2.0 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| ipython PyPI | ≥ 0.12, < 1.2.0
| 1.2.0
|
| ipython notebook | = 0.12= 0.12.1= 0.13= 0.13.1= 0.13.2= 1.0.0= 1.1.0
| No fix yet |
Description
IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
NVD description
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free