Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39257
HistoryFeb 14, 2023 - 8:39 a.m.

Command Injection

2023-02-1408:39:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
command injection
ipython
windows
input sanitization
ctypes

0.001 Low

EPSS

Percentile

29.8%

ipython is vulnerable to Command Injection. The vulnerability exists due to improper input sanitization in the _set_term_title function of terminal.py, which allows an attacker to inject maliciously crafted commands if the host is running Windows and ctypes is not available.

CPENameOperatorVersion
ipythonle8.9.0
ipythonle8.9.0

0.001 Low

EPSS

Percentile

29.8%