Логотип exploitDog
bind:CVE-2018-8768
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-8768

Количество 4

Количество 4

ubuntu логотип

CVE-2018-8768

почти 8 лет назад

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2018-8768

почти 8 лет назад

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2018-8768

почти 8 лет назад

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file c ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-6cwv-x26c-w2q4

больше 7 лет назад

Jupyter Notebook file bypasses sanitization, executes JavaScript

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-8768

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

CVSS3: 7.8
0%
Низкий
почти 8 лет назад
nvd логотип
CVE-2018-8768

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

CVSS3: 7.8
0%
Низкий
почти 8 лет назад
debian логотип
CVE-2018-8768

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file c ...

CVSS3: 7.8
0%
Низкий
почти 8 лет назад
github логотип
GHSA-6cwv-x26c-w2q4

Jupyter Notebook file bypasses sanitization, executes JavaScript

CVSS3: 7.8
0%
Низкий
больше 7 лет назад

Уязвимостей на страницу