CVE-2015-5607

moderate-risk

Published 2017-09-20

Cross-site request forgery in the REST API in IPython 2 and 3.

Do I need to act?

0.26% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Ipython

Fedora

Ipython Fedoraproject

Issue Tracking http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162671.html

Issue Tracking http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162936.html

Exploit http://www.openwall.com/lists/oss-security/2015/07/21/3

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1243842

Patch https://github.com/ipython/ipython/commit/1415a9710407e7c14900531813c15ba6165f08...

Patch https://github.com/ipython/ipython/commit/a05fe052a18810e92d9be8c1185952c13fe4e5...

Issue Tracking http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162671.html

Issue Tracking http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162936.html

Exploit http://www.openwall.com/lists/oss-security/2015/07/21/3

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1243842

Patch https://github.com/ipython/ipython/commit/1415a9710407e7c14900531813c15ba6165f08...

Patch https://github.com/ipython/ipython/commit/a05fe052a18810e92d9be8c1185952c13fe4e5...

/ 100

moderate-risk

Severity 30/34 · Critical

Exploitability 1/34 · Minimal

Exposure 18/34 · Moderate