Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2015-6938
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-21 Sep, 2015 | 19:59
Updated At-06 May, 2026 | 22:30

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 4.3
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
jupyter
jupyter
>>notebook>>4.0.0
cpe:2.3:a:jupyter:notebook:4.0.0:*:*:*:*:*:*:*
jupyter
jupyter
>>notebook>>4.0.1
cpe:2.3:a:jupyter:notebook:4.0.1:*:*:*:*:*:*:*
jupyter
jupyter
>>notebook>>4.0.2
cpe:2.3:a:jupyter:notebook:4.0.2:*:*:*:*:*:*:*
jupyter
jupyter
>>notebook>>4.0.3
cpe:2.3:a:jupyter:notebook:4.0.3:*:*:*:*:*:*:*
jupyter
jupyter
>>notebook>>4.0.4
cpe:2.3:a:jupyter:notebook:4.0.4:*:*:*:*:*:*:*
Fedora Project
fedoraproject
>>fedora>>21
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
Fedora Project
fedoraproject
>>fedora>>22
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
Fedora Project
fedoraproject
>>fedora>>23
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
openSUSE
opensuse
>>opensuse>>13.1
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
openSUSE
opensuse
>>opensuse>>13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
ipython
ipython
>>notebook>>Versions up to 3.2.1(inclusive)
cpe:2.3:a:ipython:notebook:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
CWE ID: CWE-79
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166460.htmlcve@mitre.org
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166471.htmlcve@mitre.org
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.htmlcve@mitre.org
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00016.htmlcve@mitre.org
Third Party Advisory
http://seclists.org/oss-sec/2015/q3/474cve@mitre.org
N/A
http://seclists.org/oss-sec/2015/q3/544cve@mitre.org
Mailing List
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1259405cve@mitre.org
Issue Tracking
https://github.com/ipython/ipython/commit/3ab41641cf6fce3860c73d5cf4645aa12e1e5892cve@mitre.org
Exploit
https://github.com/jupyter/notebook/commit/35f32dd2da804d108a3a3585b69ec3295b2677edcve@mitre.org
Exploit
https://github.com/jupyter/notebook/commit/dd9876381f0ef09873d8c5f6f2063269172331e3cve@mitre.org
Issue Tracking
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166460.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166471.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00016.htmlaf854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://seclists.org/oss-sec/2015/q3/474af854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/oss-sec/2015/q3/544af854a3a-2127-422b-91ae-364da2661108
Mailing List
Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1259405af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
https://github.com/ipython/ipython/commit/3ab41641cf6fce3860c73d5cf4645aa12e1e5892af854a3a-2127-422b-91ae-364da2661108
Exploit
https://github.com/jupyter/notebook/commit/35f32dd2da804d108a3a3585b69ec3295b2677edaf854a3a-2127-422b-91ae-364da2661108
Exploit
https://github.com/jupyter/notebook/commit/dd9876381f0ef09873d8c5f6f2063269172331e3af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Patch
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166460.html
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166471.html
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.html
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://lists.opensuse.org/opensuse-updates/2015-10/msg00016.html
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: http://seclists.org/oss-sec/2015/q3/474
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2015/q3/544
Source: cve@mitre.org
Resource:
Mailing List
Patch
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1259405
Source: cve@mitre.org
Resource:
Issue Tracking
Hyperlink: https://github.com/ipython/ipython/commit/3ab41641cf6fce3860c73d5cf4645aa12e1e5892
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: https://github.com/jupyter/notebook/commit/35f32dd2da804d108a3a3585b69ec3295b2677ed
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: https://github.com/jupyter/notebook/commit/dd9876381f0ef09873d8c5f6f2063269172331e3
Source: cve@mitre.org
Resource:
Issue Tracking
Patch
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166460.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166471.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167670.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://lists.opensuse.org/opensuse-updates/2015-10/msg00016.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://seclists.org/oss-sec/2015/q3/474
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2015/q3/544
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Patch
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1259405
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Issue Tracking
Hyperlink: https://github.com/ipython/ipython/commit/3ab41641cf6fce3860c73d5cf4645aa12e1e5892
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: https://github.com/jupyter/notebook/commit/35f32dd2da804d108a3a3585b69ec3295b2677ed
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: https://github.com/jupyter/notebook/commit/dd9876381f0ef09873d8c5f6f2063269172331e3
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Issue Tracking
Patch
Change History
0Changes found
Details not found