In breve
- CVE-2014-3429 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda ipython, ipython notebook (ipython).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.7%, superiore al 91.8% delle vulnerabilità.
- Correzione: aggiornare a 1.2.0 o successiva.
| Package | Affected versions | Patched versions |
|---|
| ipython PyPI | ≥ 0.12, < 1.2.0
| 1.2.0
|
| ipython notebook | = 0.12= 0.12.1= 0.13= 0.13.1= 0.13.2= 1.0.0= 1.1.0
| No fix yet |
Description
IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
NVD description
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free