CVE-2024-22420 Stored cross site scripting in Markdown Preview in JupyterLab

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the...

CVE-2024-22420

CVE-2024-22420 affects JupyterLab; the vulnerability arises when a user opens a malicious Markdown file via the Markdown Preview feature, allowing the attacker to access the attacked user’s data and perform arbitrary requests as that user. According to connected sources, impact is limited to data...

alactions (>=0.0.7 <=0.0.11), ale-uy (=1.5.0) +36 more potentially affected by CVE-2024-22420 via notebook (>=7.0.0 <=7.0.6)

notebook PYPI version =7.0.0, =0.0.7, =1.0.1, =0.0.1, =0.20.0, =0.0.1, =0.1.1, =0.2.0, =1.6.0, =1.16.0, =1.18.0.post1 - lp-aicloud =4.0.0 and more Source cves: CVE-2024-22420 Source advisory: OSV:GHSA-4M77-CMPX-VJC4...

a2 (>=0.1.0 <=0.3.17), aerocm (>=0.1.1b0 <=0.2.0b0) +114 more potentially affected by CVE-2024-22420 via jupyterlab (>=4.0.0 <=4.0.10)

jupyterlab PYPI version =4.0.0, =0.1.0, =0.1.1b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.1.1, =0.6.4, =0.8.0, =0.0.4a0, =0.2.2, =0.26.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.2.4 and more Source cves: CVE-2024-22420 Source advisory: OSV:GHSA-4M77-CMPX-VJC4...