CVE-2023-35174

HIGH8.6

Livebook Desktop's protocol handler can be exploited to execute arbitrary command on Windows

Published Jun 22, 2023

Modified 1 years ago

Details

Livebook is a web application for writing interactive and collaborative code notebooks. On Windows, it is possible to open a livebook:// link from a browser which opens Livebook Desktop and triggers arbitrary code execution on victim's machine. Any user using Livebook Desktop on Windows is potentially vulnerable to arbitrary code execution when they expect Livebook to be opened from browser. This vulnerability has been fixed in version 0.8.2 and 0.9.3.

References

WEBhttps://github.com/livebook-dev/livebook/commit/2e11b59f677c6ed3b6aa82dad412a8b3406ffdf1 WEBhttps://github.com/livebook-dev/livebook/commit/beb10daaadcc765f0380e436bd7cd5f74cf086c8 WEBhttps://github.com/livebook-dev/livebook/releases/tag/v0.8.2 WEBhttps://github.com/livebook-dev/livebook/releases/tag/v0.9.3 WEBhttps://github.com/livebook-dev/livebook/security/advisories/GHSA-564w-97r7-c6p9 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2023-35174

CVSS Analysis

CVSS v3.1

8.6

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

HighI:H

Availability

LowA:L

8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Weakness Type (CWE)

Injection

CWE-78

OS Command Injection

Ecosystems

Timeline

PublishedJun 22, 2023

ModifiedDec 6, 2024