GHSA-92MR-V722-F48M Improper Input Validation in Jupyter Notebook

🗓️ 17 May 2022 03:25:49Reported by GoogleType

osv🔗 osv.dev👁 27 Views

Improper Input Validation in Jupyter Notebook before version 3.2.2 and Jupyter Notebook 4.0.x before version 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, triggering a redirect to files/, related to MIME types

Reporter	Title	Published	Views	Family All 21
CNVD	IPython Notebook Arbitrary Code Execution Vulnerability	4 Oct 201500:00	–	cnvd
CVE	CVE-2015-7337	29 Sep 201519:00	–	cve
Cvelist	CVE-2015-7337	29 Sep 201519:00	–	cvelist
Debian CVE	CVE-2015-7337	29 Sep 201519:00	–	debiancve
EUVD	EUVD-2015-0024	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 23 Update: ipython-3.2.1-3.fc23	25 Sep 201508:54	–	fedora
Tenable Nessus	Fedora 23 : ipython-3.2.1-3.fc23 (2015-16128)	28 Sep 201500:00	–	nessus
Tenable Nessus	FreeBSD : devel/ipython -- multiple vulnerabilities (290351c9-6f5c-11e5-a2a1-002590263bf5)	12 Oct 201500:00	–	nessus
Tenable Nessus	GLSA-201512-02 : IPython: User-assisted execution of arbitrary code	18 Dec 201500:00	–	nessus
Github Security Blog	Improper Input Validation in Jupyter Notebook	17 May 202203:25	–	github

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-7337
github	www.github.com/ipython/ipython/commit/0a8096adf165e2465550bd5893d7e352544e5967
github	www.github.com/jupyter/notebook/commit/9e63dd89b603dfbe3a7e774d8a962ee0fa30c0b5
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-92mr-v722-f48m
github	www.github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2015-25.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/notebook/PYSEC-2015-27.yaml
security	www.security.gentoo.org/glsa/201512-02
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.html
seclists	www.seclists.org/oss-sec/2015/q3/558

20 Sep 2024 22:11Current

6.9Medium risk

Vulners AI Score6.9

CVSS 49.3

CVSS 3.19.8

EPSS0.01685