Unscored severity · published Sep 29, 2015
CVE-2015-7337
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers…
–
CVSS
2.5%
EPSS
No
On KEV
Description
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NO
Notebook · Ipython
through 3.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7337
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7337
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.html
seclists.org
http://seclists.org/oss-sec/2015/q3/558
seclists.org
http://seclists.org/oss-sec/2015/q3/634
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1264067
github.com
https://github.com/ipython/ipython/commit/0a8096adf165e2465550bd5893d7e352544e5967
github.com
https://github.com/jupyter/notebook/commit/9e63dd89b603dfbe3a7e774d8a962ee0fa30c0b5
More from Notebook
–
CVE-2015-6938
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote…