Jupyter Notebook XSS via untrusted notebooks
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. In other words, nbconvert endpoints can execute JavaScript with access to the server API. In notebook/nbconvert/handlers.py, NbconvertFileHandler and NbconvertPostHandler do not set a Content Security Policy to prevent this.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-19351US | medium6.1 | — | ||
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. In other words, nbconv… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/jupyter/notebookPACKAGE
- https://github.com/jupyter/notebook/blob/master/docs/source/changelog.rstWEB
- https://github.com/jupyter/notebook/commit/107a89fce5f413fb5728c1c5d2c7788e1fb17491WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/notebook/PYSEC-2018-17.yamlWEB
- https://groups.google.com/forum/#!topic/jupyter/hWzu2BSsplYWEB
- https://lists.debian.org/debian-lts-announce/2020/11/msg00033.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-19351ADVISORY
- https://pypi.org/project/notebook/#historyWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan