Stored XSS in Jupyter nbdime

🗓️ 08 Nov 2021 18:27:09Reported by GitHub Advisory DatabaseType

Improper input handling in Jupyter nbdime causing stored XSS vulnerabilit

Reporter	Title	Published	Views	Family All 8
Veracode	Cross-site Scripting (XSS)	5 Nov 202104:21	–	veracode
NVD	CVE-2021-41134	3 Nov 202118:15	–	nvd
Cvelist	CVE-2021-41134 Stored XSS in Jupyter nbdime	3 Nov 202117:50	–	cvelist
CVE	CVE-2021-41134	3 Nov 202118:15	–	cve
OSV	CVE-2021-41134	3 Nov 202118:15	–	osv
OSV	Stored XSS in Jupyter nbdime	8 Nov 202118:09	–	osv
OSV	PYSEC-2021-428	3 Nov 202118:15	–	osv
Prion	Cross site scripting	3 Nov 202118:15	–	prion

Vulners

Node

jupyter nbdime\-jupyterlabRange2.0.0–2.1.1

jupyter nbdime\-jupyterlabRange<1.0.1

jupyter nbdimeRange6.0.0–6.1.2

jupyter nbdimeRange<5.0.2

jupyter nbdimeRange3.0.0–3.1.1

jupyter nbdimeRange2.0.0–2.1.1

jupyter nbdimeRange<1.1.1

Source	Link
github	www.github.com/jupyter/nbdime/security/advisories/GHSA-p6rw-44q7-3fw4
github	www.github.com/jupyter/nbdime/commit/e44a5cc7677f24b45ebafc756db49058c2f750ea
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41134
github	www.github.com/pypa/advisory-database/tree/main/vulns/nbdime/PYSEC-2021-428.yaml
github	www.github.com/advisories/GHSA-p6rw-44q7-3fw4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Nov 2021 18:09Current

1Low risk

Vulners AI Score1

CVSS23.5

CVSS35.4 - 8.7

EPSS0.0005

CWE-79