CVE-2024-22891

Nteract PoC CVE-2024-22891 漏洞的概念验证（Proof-of-Concept）。 nteract 0.28.0 允许通过 Markdown 链接使用 Electron Webview，从而导致远程代码执行。 该存储库中包含一个存在漏洞的示例应用及其概念验证（POC）利用代码。 作为 PoC，其中提供了一个可自动完成该过程的 Python 文件。 1. 漏洞概述： 漏洞主题：Markdown 链接 RCE 漏洞类型：其他：开放重定向（Open Redirect） 问题表现：Electron Webview 受影响组件：markdown...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Exploit for Open Redirect in Nteract

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...

Remote Code Execution(RCE)

Nteract is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a lack of input validation in the Markdown link parsing functionality, allowing malicious actors to execute arbitrary code remotely...

GHSA-6JVG-HP25-42F6 Nteract Remote Code Execution vulnerability

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Nteract Remote Code Execution vulnerability

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

Remote code execution

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

PT-2024-19599 · Interact · Interact

Name of the Vulnerable Software and Affected Versions: Nteract version 0.28.0 Description: The issue is related to a remote code execution RCE vulnerability via the Markdown link. Recommendations: For Nteract version 0.28.0, update to a version that fixes the remote code execution vulnerability...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

CVE-2024-22891

CVE-2024-22891 affects Nteract v0.28.0 and is a Remote Code Execution (RCE) via Markdown links. The issue arises from using Electron WebView with nodeIntegration enabled in the Markdown parser, enabling an attacker to achieve RCE by crafting a link or shared file. The CVSS v3.1 impact is high (CV...

Nteract Security Vulnerabilities

Nteract is an ecosystem of React components, JavaScript packages, and applications built on the Jupyter specification from Nteract, Inc. A security vulnerability exists in Nteract version v.0.28.0, which stems from a Remote Code Execution RCE vulnerability in Markdown links...

CVE-2024-22891

Nteract v.0.28.0 was discovered to contain a remote code execution RCE vulnerability via the Markdown link...

@nteract/commuter (>=5.6.7, <=5.6.9), @nteract/play (>=1.6.6, <=1.6.8) +6 more potentially affected by CVE-2018-18282 via next (>=7.0.0, <=7.0.1)

next NPM version =7.0.0, =5.6.7, =1.6.6, =7.0.0, =0.29.3, =1.0.1, =0.0.1-beta.9, =2.0.0, =0.1.1, =0.1.4 Source cves: CVE-2018-18282 Source advisory: OSV:GHSA-QW96-MM2G-C8M7...