Описание
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 3.2.1 (включая)
cpe:2.3:a:ipython:notebook:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:jupyter:notebook:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:jupyter:notebook:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:jupyter:notebook:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:jupyter:notebook:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:jupyter:notebook:4.0.4:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02487
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
ubuntu
около 11 лет назад
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.
debian
около 11 лет назад
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x ...
altlinux
почти 9 лет назад
ALT-PU-2017-3611: package `python-module-notebook` update to version 5.2.2-alt1
EPSS
Процентиль: 85%
0.02487
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-20