Security Advisory

CVE-2018-19352

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-11-18 17:00:00

Last updated 2024-08-05 11:37:10

Assigner mitre

State PUBLISHED

Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.