IPythonGHSA-66gw-5xpf-gfp5
Improper Neutralization of Input During Web Page Generation in IPython
Medium6.1CVE-2015-4707 · Published May 13, 2022 · updated Sep 23, 2024
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| ipython PyPI | < 3.2.0 | 3.2.0 |
Details and references
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-79
- Also known as
- CVE-2015-4707, PYSEC-2017-46
- nvd.nist.gov/vuln/detail/CVE-2015-4707
- github.com/ipython/ipython/commit/7222bd53ad089a65fd610fab4626f9d0ab47dfce
- github.com/ipython/ipython/commit/c2078a53543ed502efd968649fee1125e0eb549c
- bugzilla.redhat.com/show_bug.cgi?id=1235688
- github.com/advisories/GHSA-66gw-5xpf-gfp5
- github.com/ipython/ipython
- github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2017-46.yaml
- ipython.org/ipython-doc/3/whatsnew/version3.html
- web.archive.org/web/20200227150022/https://www.securityfocus.com/bid/75328
- www.openwall.com/lists/oss-security/2015/06/22/7
More IPython advisories
All IPython| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 142022 | IPython Notebook vulnerable to improper validation of the origin of websocket requests CVE-2014-3429High9.8fixed in 1.2.0 | High9.8 | 1.2.0 |
| May 172022 | IPython vulnerable to cross site request forgery (CSRF) CVE-2015-5607High8.8fixed in 2.4.1, 3.2.3 | High8.8 | 2.4.1, 3.2.3 |
| May 172022 | Improper Neutralization of Input During Web Page Generation in IPython CVE-2015-4706Medium6.1fixed in 3.2.0 | Medium6.1 | 3.2.0 |
| Jan 212022 | Execution with Unnecessary Privileges in ipython CVE-2022-21699High8.2fixed in 5.11, 7.16.3, 7.31.1, 8.0.1 | High8.2 | 5.11, 7.16.3, 7.31.1, 8.0.1 |
| Feb 102023 | IPython vulnerable to command injection via set_term_title CVE-2023-24816Low4.5fixed in 8.10.0 | Low4.5 | 8.10.0 |