Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7839
HistoryNov 19, 2018 - 7:20 a.m.

Cross-site Scripting (XSS)

2018-11-1907:20:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.001

Percentile

47.0%

notebook is vulnerable to a cross-site scripting (XSS) attack. The library does not properly sanitize URLs passed through a directory name, allowing a malicious user to inject and execute arbitrary Javascript.