Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

Matthias Bussonnier reports :

Summary: Local folder name was used in HTML templates without escaping, allowing XSS in said pages by carefully crafting folder name and URL to access it.

URI with issues :

- GET /tree/**

Benjamin RK reports :

Vulnerability: A maliciously forged file opened for editing can execute JavaScript, specifically by being redirected to /files/ due to a failure to treat the file as plain text.

URI with issues :

- GET /edit/**

IPython was updated to fix a cross-site-scripting vulnerability in handling local foldernames. (CVE-2015-6938, bnc#945828)

Add upstream patch to fix file execution vulnerability (bug #1264067)
---- Add upstream patch to fix XSS vulnerability (bug #1259405)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Add upstream patch to fix XSS vulnerability (bug #1259405)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
86335	FreeBSD : devel/ipython -- multiple vulnerabilities (290351c9-6f5c-11e5-a2a1-002590263bf5)	Nessus	FreeBSD Local Security Checks	medium
86321	openSUSE Security Update : IPython / python3-IPython (openSUSE-2015-638)	Nessus	SuSE Local Security Checks	medium
86174	Fedora 23 : ipython-3.2.1-3.fc23 (2015-16128)	Nessus	Fedora Local Security Checks	medium
85990	Fedora 22 : ipython-2.4.1-8.fc22 (2015-14902)	Nessus	Fedora Local Security Checks	medium
85989	Fedora 21 : ipython-2.4.1-8.fc21 (2015-14901)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2015-6938

medium

Tenable Plugins

medium

medium

medium

medium

medium