Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 5

Количество 5

ubuntu логотип

CVE-2021-32862

около 4 лет назад

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2021-32862

около 4 лет назад

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2021-32862

около 4 лет назад

The GitHub Security Lab discovered sixteen ways to exploit a cross-sit ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-9jmq-rx5f-8jwq

больше 4 лет назад

nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths

CVSS3: 5.4
EPSS: Низкий
altlinux логотип

ALT-PU-2022-3366

почти 4 года назад

ALT-PU-2022-3366: package `python3-module-nbconvert` update to version 7.2.6-alt1

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).

CVSS3: 5.4
2%
Низкий
около 4 лет назад
nvd логотип
CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).

CVSS3: 5.4
2%
Низкий
около 4 лет назад
debian логотип
CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-sit ...

CVSS3: 5.4
2%
Низкий
около 4 лет назад
github логотип
GHSA-9jmq-rx5f-8jwq

nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths

CVSS3: 5.4
2%
Низкий
больше 4 лет назад
altlinux логотип
ALT-PU-2022-3366

ALT-PU-2022-3366: package `python3-module-nbconvert` update to version 7.2.6-alt1

CVSS3: 5.4
2%
Низкий
почти 4 года назад

Уязвимостей на страницу