Lucene search

K
cvelistMitreCVELIST:CVE-2018-21030
HistoryOct 31, 2019 - 2:52 p.m.

CVE-2018-21030

2019-10-3114:52:45
mitre
www.cve.org

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%