Описание
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 5.5.0-1 |
| cosmic | not-affected | 5.5.0-1 |
| devel | not-affected | 5.5.0-1 |
| disco | not-affected | 5.5.0-1 |
| eoan | not-affected | 5.5.0-1 |
| esm-apps-legacy/xenial | not-affected | 2.4.1-1 |
| esm-apps/bionic | not-affected | 5.5.0-1 |
| esm-apps/focal | not-affected | 5.5.0-1 |
| esm-apps/jammy | not-affected | 5.5.0-1 |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.
Cross-site scripting (XSS) vulnerability in the file browser in notebo ...
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
ALT-PU-2017-3611: package `python-module-notebook` update to version 5.2.2-alt1
EPSS
4.3 Medium
CVSS2