Количество 4
Количество 4
CVE-2021-32862
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).
CVE-2021-32862
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).
CVE-2021-32862
The GitHub Security Lab discovered sixteen ways to exploit a cross-sit ...
GHSA-9jmq-rx5f-8jwq
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-32862 The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer). | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад | |
CVE-2021-32862 The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer). | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад | |
CVE-2021-32862 The GitHub Security Lab discovered sixteen ways to exploit a cross-sit ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад | |
GHSA-9jmq-rx5f-8jwq nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths | CVSS3: 5.4 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу