IPython vulnerable to cross site request forgery (CSRF)
IPython (Interactive Python) is a command shell. Cross-site request forgery in the REST API is possible in in IPython 2 and 3. Versions 2.4.1 and 3.2.3 contain patches.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-5607US | high8.8 | — | ||
Cross-site request forgery in the REST API in IPython 2 and 3. | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162671.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162936.htmlWEB
- http://www.openwall.com/lists/oss-security/2015/07/21/3WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1243842WEB
- https://github.com/advisories/GHSA-7fc2-rm35-2pp7ADVISORY
- https://github.com/ipython/ipythonPACKAGE
- https://github.com/ipython/ipython/commit/1415a9710407e7c14900531813c15ba6165f0816WEB
- https://github.com/ipython/ipython/commit/a05fe052a18810e92d9be8c1185952c13fe4e5b0WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan