ipython notebook vulnerabilities

Latest ipython notebook CVEs

Newest publication first

1. CVE-2015-7337 Improper Input Validation in Jupyter Notebook

   Published 2015-09-29

   Medium·CVSS 6.8 EPSS 2.5%

   The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

2. CVE-2015-6938 Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

   Published 2015-09-21

   Medium·CVSS 4.3 EPSS 2.8%

   Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.