Описание
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.4.1-1 |
| cosmic | not-affected | 2.4.1-1 |
| devel | not-affected | 2.4.1-1 |
| disco | not-affected | 2.4.1-1 |
| eoan | not-affected | 2.4.1-1 |
| esm-apps-legacy/xenial | not-affected | 2.4.1-1 |
| esm-apps/bionic | not-affected | 2.4.1-1 |
| esm-apps/focal | not-affected | 2.4.1-1 |
| esm-apps/jammy | not-affected | 2.4.1-1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows ...
Improper Neutralization of Input During Web Page Generation in IPython
ALT-PU-2015-1666: package `ipython` update to version 3.2.1-alt1
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3