Lucene search
Veracode Vulnerability DatabaseVERACODE:37699HistoryOct 27, 2022 - 4:34 a.m.
Arbitrary Code Execution
2022-10-2704:34:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
jupyter_core
arbitrary code execution
vulnerability
config file paths
application.py
untrusted files
0.005 Low
EPSS
Percentile
75.5%
jupyter_core is vulnerable to arbitrary code execution. The vulnerability exists in the config_file_paths function in application.py which executes untrusted files in the current working directory, allowing one user to run code as another.
References
github.com/jupyter/jupyter_core/commit/1118c8ce01800cb689d51f655f5ccef19516e283
github.com/jupyter/jupyter_core/security/advisories/GHSA-m678-f26j-3hrp
lists.debian.org/debian-lts-announce/2022/11/msg00022.html
lists.fedoraproject.org/archives/list/[email protected]/message/KKMP5OXXIX2QAUNVNJZ5UEQFKDYYJVBA/
lists.fedoraproject.org/archives/list/[email protected]/message/YIDN7JMLK6AOMBQI4QPSW4MBQGWQ5NIN/
security.gentoo.org/glsa/202301-04
www.debian.org/security/2023/dsa-5422
Related
openvas
openvas
Fedora: Security Advisory for python-jupyter-core (FEDORA-2023-d966145959)
2023-01-30 00:00:00
Ubuntu: Security Advisory (USN-6153-1)
2023-06-12 00:00:00
Fedora: Security Advisory for python-jupyter-core (FEDORA-2023-de87bd076b)
2023-01-30 00:00:00
ubuntu
ubuntu
Jupyter Core vulnerability
2023-06-12 00:00:00
nvd
nvd
CVE-2022-39286
2022-10-26 20:15:10
prion
prion
Remote code execution
2022-10-26 20:15:00
nessus
nessus
Debian DSA-5422-1 : jupyter-core - security update
2023-06-12 00:00:00
GLSA-202301-04 : jupyter_core: Arbitrary Code Execution
2023-01-11 00:00:00
osv
osv
jupyter-core vulnerability
2023-06-12 00:23:43
PYSEC-2022-42974
2022-10-26 20:15:00
jupyter-core - security update
2022-11-17 00:00:00
gentoo
gentoo
jupyter_core: Arbitrary Code Execution
2023-01-11 00:00:00
debian
debian
[SECURITY] [DLA 3195-1] jupyter-core security update
2022-11-17 11:38:17
[SECURITY] [DSA 5422-1] jupyter-core security update
2023-06-09 07:26:17
fedora
fedora
[SECURITY] Fedora 37 Update: python-jupyter-core-4.10.0-4.fc37
2023-01-30 01:27:28
[SECURITY] Fedora 36 Update: python-jupyter-core-4.9.1-3.fc36
2023-01-30 01:32:38
cve
cve
CVE-2022-39286
2022-10-26 20:15:10
mageia
mageia
Updated jupyter-core packages fix security vulnerability
2023-02-27 23:27:16
github
github
Execution with Unnecessary Privileges in JupyterApp
2022-10-26 22:07:00
debiancve
debiancve
CVE-2022-39286
2022-10-26 20:15:10
ubuntucve
ubuntucve
CVE-2022-39286
2022-10-26 00:00:00
cvelist
cvelist
CVE-2022-39286 Execution with Unnecessary Privileges in JupyterApp
2022-10-26 00:00:00
