CVE-2015-7337

NONE EPSS 74.2%
Published Sep 29, 201510y ago · Modified Jun 17, 20262w ago
Find Similar
Published Sep 29, 2015 10y ago
Last Modified Jun 17, 2026 2w ago

Description

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

Threat Intelligence

EPSS Exploit Probability
74.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 6

VendorProductVersionRange
ipythonnotebook* ≤3.2.1
jupyternotebook4.0.0any
jupyternotebook4.0.1any
jupyternotebook4.0.2any
jupyternotebook4.0.3any
jupyternotebook4.0.4any

References 7

  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.html
  • seclists.org http://seclists.org/oss-sec/2015/q3/558
  • seclists.org http://seclists.org/oss-sec/2015/q3/634
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1264067
  • github.com https://github.com/ipython/ipython/commit/0a8096adf165e2465550bd5893d7e352544e5967
  • github.com https://github.com/jupyter/notebook/commit/9e63dd89b603dfbe3a7e774d8a962ee0fa30c0b5
  • security.gentoo.org https://security.gentoo.org/glsa/201512-02

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.