Em resumo
- CVE-2014-3429 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta ipython, ipython notebook (ipython).
- Chance de exploração nos próximos 30 dias (EPSS): 4.7%, maior que 91.8% das vulnerabilidades.
- Correção: atualize para 1.2.0 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| ipython PyPI | ≥ 0.12, < 1.2.0
| 1.2.0
|
| ipython notebook | = 0.12= 0.12.1= 0.13= 0.13.1= 0.13.2= 1.0.0= 1.1.0
| No fix yet |
Description
IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
NVD description
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free