Lucene search
+L

1 matches found

OSV
OSV
added 2021/08/23 7:40 p.m.10 views

GHSA-4952-P58Q-6CRX JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

Impact Untrusted notebook can execute code on load. This is a remote code execution, but requires user action to open a notebook. Patches Patched in the following versions: 3.1.4, 3.0.17, 2.3.2, 2.2.10, 1.2.21. References OWASP Page on Restricting Form Submissions For more information If you have...

7.4CVSS7.4AI score0.02638EPSS
SaveExploits1References5
Rows per page
Query Builder