CVE-2024-39700 PoC — JupyterLab 安全漏洞

Description

CVE-2024-39700 Proof of Concept

介绍

# CVE-2024-39700 Proof of Concept

Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability.

## PoC

- PR:
  - https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2
  - [Commit](https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2/commits/2ce488a057e0434fa0f093528d4b6e441aa47916)
- Action Result: https://github.com/LOURC0D3/CVE-2024-39700-PoC/actions/runs/10157571828/job/28087926847

### Result

<img width="721" alt="result" src="https://github.com/user-attachments/assets/646eb8eb-3eb6-4717-a34b-7a22436b6b69">

This is not my bug, I just made a PoC for it.

# Reference

- https://github.com/jupyterlab/extension-template/security/advisories/GHSA-45gq-v5wm-82wg

文件快照

备注