PT-2023-6832 · Python+1 · Python+1
Carreau
·
Publicado
2023-02-10
·
Atualizado
2024-08-07
·
CVE-2023-24816
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IPython versions prior to 8.10.0
Description
The issue exists due to the lack of neutralization of special elements used in the operating system command. Exploitation of this issue may allow an attacker to execute arbitrary commands by providing specially crafted data to the application. This vulnerability requires the
IPython.utils.terminal.set term title function to be called on Windows in a Python environment where ctypes is not available. The vulnerability can be exploited if an attacker can control directory names and manage to get a user to change into this directory, then the attacker can execute arbitrary commands contained in the folder names.Recommendations
For versions prior to 8.10.0, users are advised to upgrade to version 8.10.0 or later.
For users unable to upgrade, ensure that any calls to the
IPython.utils.terminal.set term title function are done with trusted or filtered input.
As a temporary workaround, consider restricting access to the set term title function until a patch is available.Exploit
Correção
OS Command Injection
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Python