Поиск уязвимостей
Количество 7
Количество 7
GHSA-hwvq-6gjx-j797
Special Element Injection in notebook
CVE-2021-32798
The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.
CVE-2021-32798
The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.
CVE-2021-32798
The Jupyter notebook is a web-based notebook environment for interacti ...
BDU:2022-01679
Уязвимость компонента Caja среды создания документов блокнота Jupyter Notebook, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
openSUSE-SU-2024:0231-1
Security update for python-notebook
ALT-PU-2021-3006
ALT-PU-2021-3006: package `python3-module-notebook` update to version 6.4.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hwvq-6gjx-j797 Special Element Injection in notebook | CVSS3: 10 | 2% Низкий | около 5 лет назад |
 | CVE-2021-32798 The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs. | CVSS3: 9.6 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-32798 The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs. | CVSS3: 9.6 | 2% Низкий | больше 5 лет назад |
| CVE-2021-32798 The Jupyter notebook is a web-based notebook environment for interacti ... | CVSS3: 9.6 | 2% Низкий | больше 5 лет назад |
 | BDU:2022-01679 Уязвимость компонента Caja среды создания документов блокнота Jupyter Notebook, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.6 | 2% Низкий | больше 5 лет назад |
 | openSUSE-SU-2024:0231-1 Security update for python-notebook | больше 2 лет назад | ||
| ALT-PU-2021-3006 ALT-PU-2021-3006: package `python3-module-notebook` update to version 6.4.4-alt1 | CVSS3: 9.6 | 2% Низкий | около 5 лет назад |
Уязвимостей на страницу