Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Quarl

#30016of 53,624
8.8Total CVSS
Vulnerabilities · 1
PT-2022-4801
8.8
2022-01-19
Python · Python · CVE-2022-21699
**Name of the Vulnerable Software and Affected Versions** IPython versions prior to 7.31.1 IPython versions prior to 8.0.1 IPython versions prior to 7.16.3 **Description** The issue is related to arbitrary code execution achieved by not properly managing cross-user temporary files. This allows one user to run code as another on the same machine, potentially leading to unauthorized access to confidential data, disruption of data integrity, and denial of service. **Recommendations** For IPython versions prior to 7.31.1, upgrade to version 7.31.1 or later. For IPython versions prior to 8.0.1, upgrade to version 8.0.1 or later. For IPython versions prior to 7.16.3, upgrade to version 7.16.3 or later. As a temporary workaround, consider restricting access to directories where multiple users may write to, to minimize the risk of cross-user attacks.