CVE-2015-6938
Published
CVSS v3
N/A
CVSS v2
4.3
MEDIUM
Affected
2
PROJECTS
Description
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.
Official repository for IPython itself. Other repos in the IPython organization contain things like the website, documentation builds, etc.
GitHub