Lucene search

K
osvGoogleOSV:GHSA-3P4Q-X8F3-P7VQ
HistoryNov 21, 2018 - 10:19 p.m.

Jupyter Notebook XSS via directory name

2018-11-2122:19:22
Google
osv.dev
7

0.001 Low

EPSS

Percentile

47.0%

Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.