CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Exploit for Open Redirect in Nteract

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...

Remote Code Execution(RCE)

Nteract is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a lack of input validation in the Markdown link parsing functionality, allowing malicious actors to execute arbitrary code remotely...

GHSA-6JVG-HP25-42F6 Nteract Remote Code Execution vulnerability

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Nteract Remote Code Execution vulnerability

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Remote code execution

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

PT-2024-19599 · Interact · Interact

Name of the Vulnerable Software and Affected Versions: Nteract version 0.28.0 Description: The issue is related to a remote code execution RCE vulnerability via the Markdown link. Recommendations: For Nteract version 0.28.0, update to a version that fixes the remote code execution vulnerability...

CVE-2024-22891: URL Redirection to Untrusted Site

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Nteract Security Vulnerabilities

Nteract is an ecosystem of React components, JavaScript packages, and applications built on the Jupyter specification from Nteract, Inc. A security vulnerability exists in Nteract version v.0.28.0, which stems from a Remote Code Execution RCE vulnerability in Markdown links...

CVE-2024-22891

Nteract v.0.28.0 is vulnerable to Remote Code Execution (RCE) via the markdown component. The root cause is that the application allows an Electron webview through Markdown links while having nodeIntegration set to true in webPreferences. This configuration enables external access to the link, al...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

@nteract/commuter (>=5.6.7, <=5.6.9), @nteract/play (>=1.6.6, <=1.6.8) +6 more potentially affected by CVE-2018-18282 via next (>=7.0.0, <=7.0.1)

next NPM version =7.0.0, =5.6.7, =1.6.6, =7.0.0, =0.29.3, =1.0.1, =0.0.1-beta.9, =2.0.0, =0.1.1, =0.1.4 Source cves: CVE-2018-18282 Source advisory: OSV:GHSA-QW96-MM2G-C8M7...