Lucene search
+L

376 matches found

Tenable Nessus
Tenable Nessus
added 2024/09/06 12:0 a.m.29 views

Jupyterlab Python Library < 3.6.8 / 4.0 < 4.2.5 (CVE-2024-43805)

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS5.7AI score0.00373EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/06 12:0 a.m.59 views

Jupyter Notebook Python Library 7.0.0 < 7.2.2 (CVE-2024-43805)

Jupyter Notebook is an extensible environment for interactive and reproducible computing. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked...

7.6CVSS5.7AI score0.00373EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/08/30 10:5 a.m.3 views

SUSE CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS7.1AI score0.00373EPSS
Exploits0References4
OSV
OSV
added 2024/08/30 7:13 a.m.19 views

BIT-JUPYTERLAB-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS6.6AI score0.00373EPSS
Exploits0References2
OSV
OSV
added 2024/08/30 7:13 a.m.18 views

BIT-JUPYTER-NOTEBOOK-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS6.6AI score0.00373EPSS
Exploits0References2
OSV
OSV
added 2024/08/30 7:13 a.m.20 views

BIT-JUPYTER-BASE-NOTEBOOK-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS6.6AI score0.00373EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2024/08/29 5:55 p.m.6 views

a2 (>=0.1.0 <=0.3.17), aerocm (>=0.1.1b0 <=0.2.0b0) +187 more potentially affected by CVE-2024-43805 via jupyterlab (>=4.0.0 <=4.2.4)

jupyterlab PYPI version =4.0.0, =0.1.0, =0.1.1b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =0.1.1, =0.6.4, =0.8.0, =1.0.1, =1.6.4, =0.0.1, =0.0.4a0, =0.2.2, =0.0.1, =0.0.8.post4 and more Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...

7.6CVSS5.7AI score0.00373EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2024/08/29 5:55 p.m.5 views

aalto-gpu (=0.1.0), aplusml (>=0.1.0 <=0.3.1) +172 more potentially affected by CVE-2024-43805 via jupyterlab (>=0.31.1 <=3.6.7)

jupyterlab PYPI version =0.31.1, =0.1.0, =0.3.0, =0.8.2, =0.1.0, =1.3.5, =0.1.0, =1.1.3, =0.1.0rc1, =0.1.0, =0.2.0, =1.0.1, =1.0.3 and more Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...

7.6CVSS5.4AI score0.00373EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2024/08/29 5:55 p.m.22 views

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...

7.6CVSS6.9AI score0.00373EPSS
Exploits0References5Affected Software2
Veracode
Veracode
added 2024/08/29 9:28 a.m.19 views

Arbitrary Code Execution

JupyterLab is vulnerable to Arbitrary Code Execution. The vulnerability is due to user interaction with a malicious notebook or Markdown file using JupyterLab's preview feature, which allows execution of arbitrary code and unauthorized data access...

7.6CVSS7.3AI score0.00373EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2024/08/28 8:15 p.m.14 views

CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS0.00373EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/08/28 8:15 p.m.16 views

CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS5.8AI score0.00373EPSS
Exploits0References2
OSV
OSV
added 2024/08/28 8:15 p.m.12 views

UBUNTU-CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS6AI score0.00373EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/08/28 7:43 p.m.17 views

CVE-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS7AI score0.00373EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/28 7:43 p.m.77 views

CVE-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS0.00373EPSS
Exploits0References1
CVE
CVE
added 2024/08/28 7:43 p.m.107 views

CVE-2024-43805

CVE-2024-43805 affects JupyterLab and Jupyter Notebook where a user opens a malicious notebook or Markdown file in preview mode can lead to data access and arbitrary requests performed as the attacked user. Affected versions include JupyterLab v3.6.8, v4.2.5 and Jupyter Notebook v7.2.2; patches e...

7.6CVSS6.7AI score0.00373EPSS
Exploits0References1Affected Software2
AlpineLinux
AlpineLinux
added 2024/08/28 7:43 p.m.6 views

CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS6.4AI score0.00373EPSS
Exploits0References1
OSV
OSV
added 2024/08/28 7:43 p.m.22 views

CVE-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS6.8AI score0.00373EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/08/28 7:43 p.m.48 views

CVE-2024-43805

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user c...

7.6CVSS5.7AI score0.00373EPSS
Exploits0
CNNVD
CNNVD
added 2024/08/28 12:0 a.m.37 views

JupyterLab 安全漏洞

JupyterLab is a JupyterLab open source extensible environment for interactive and repeatable computation, based on the Jupyter Notebook and architecture. A security vulnerability exists in JupyterLab that originates from opening a malicious notebook or Markdown file with Markdown cells using the...

7.6CVSS6.5AI score0.00373EPSS
Exploits0References3
Rows per page
Query Builder