Lucene search

K
osvGoogleOSV:CVE-2018-8768
HistoryMar 18, 2018 - 6:29 a.m.

CVE-2018-8768

2018-03-1806:29:00
Google
osv.dev
8

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

30.4%

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is ‘fixed’ by jQuery after sanitization, making it dangerous.