CVE-2014-3429: PYSEC-2014-21 - IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute ar

CVE-2014-3429 · Severity: low · CVSS 3.1 · Published 2014-08-07

Technologies: ipython (PyPI). Vendors: PyPI.

Executive brief

IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.

Affected products

PyPI ipython

Related threats

PYSEC-2023-17 - IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Py
PYSEC-2022-12 - IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Py
PYSEC-2017-45 - Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vector
PYSEC-2017-46 - Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors in
PYSEC-2017-47 - Cross-site request forgery in the REST API in IPython 2 and 3.