CVE-2014-3429
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.
- EPSS
- 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ipython:ipython_notebook
- mageia:mageia
- opensuse:opensuse
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-75cw-5cgv-g853 | PyPI | ipython | >=0.12 <1.2.0 | 1.2.0 |
| PYSEC-2014-21 | PyPI | ipython | >=0.12 <1.2.0 | 1.2.0 |