NVD

Id
27972  
Name
CVE-2015-7337  
Description
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-09-29  
Modified Date
2016-12-07  
Seq
2015-7337  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147087 27972 CVE-2015-7337 FEDORA-2015-16128  View
147088 27972 CVE-2015-7337 [oss-security] 20150916 CVE Request: Maliciously crafted text files in IPython/Jupyter editor  View
147089 27972 CVE-2015-7337 [oss-security] 20150924 Re: CVE Request: Maliciously crafted text files in IPython/Jupyter editor  View
147090 27972 CVE-2015-7337 https://bugzilla.redhat.com/show_bug.cgi?id=1264067  View
147091 27972 CVE-2015-7337 https://github.com/ipython/ipython/commit/0a8096adf165e2465550bd5893d7e352544e5967  View
147092 27972 CVE-2015-7337 https://github.com/jupyter/notebook/commit/9e63dd89b603dfbe3a7e774d8a962ee0fa30c0b5  View
147093 27972 CVE-2015-7337 GLSA-201512-02  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9679 JVNDB-2015-004999 IPython Notebook および Jupyter Notebook のエディタにおける任意の JavaScript コードを実行される脆弱性 IPython Notebook および Jupyter Notebook のエディタには、MIME タイプに関する処理に不備があるため、任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2015-7337 84562 CVE-2015-7337 27972 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004999.html 2015-09-16 2015-10-01 View