CVE-2024-39700-PoC

CVE-2024-39700 概念実証 このテンプレートを test オプションで使用して作成されたリポジトリには、RCE 脆弱性を持つ update-integration-tests.yml ワークフローが含まれています。 PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 コミット アクション結果: https://github.com/LOURC0D3/CVE-2024-39700-PoC/actions/runs/10157571828/job/28087926847 結果...

CVE-2024-39700 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action

JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...

CVE-2024-39700: Improper Control of Generation of Code

JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...