Aller au contenu
en Se connecter
10.0 Critique

CVE-2021-32798 The Jupyter notebook is a web-based notebook environment for interactive computing

Description

The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.

Produits et versions touchés

Produit Versions touchées Corrigé en
notebook 6.0 6.0.0 → < 6.4.1 6.4.1
notebook 5.7 premières → < 5.7.11 5.7.11

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de notebook

Les 6 CVE de notebook →
CVE-2026-42557 jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 8.6 Élevée CVE-2026-40171 In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding… 8.4 Élevée CVE-2022-29238 Jupyter Notebook is a web-based notebook environment for interactive computing 4.3 Moyenne CVE-2022-24758 The Jupyter notebook is a web-based notebook environment for interactive computing 7.5 Élevée
Suivre cette CVE