cpe:/a:jupyter:notebook:4.0.0 cpe:/a:jupyter:notebook:4.0.1 cpe:/a:jupyter:notebook:4.0.2 cpe:/a:jupyter:notebook:4.0.3 cpe:/a:jupyter:notebook:4.0.4 cpe:/a:jupyter:notebook:4.0.5 cpe:/a:jupyter:notebook:4.0.6 cpe:/a:jupyter:notebook:4.1.0 cpe:/a:jupyter:notebook:4.2.0 cpe:/a:jupyter:notebook:4.2.1 cpe:/a:jupyter:notebook:4.2.2 cpe:/a:jupyter:notebook:4.2.3 cpe:/a:jupyter:notebook:4.3.0 cpe:/a:jupyter:notebook:4.3.1 cpe:/a:jupyter:notebook:4.3.2 cpe:/a:jupyter:notebook:4.4.0 cpe:/a:jupyter:notebook:4.4.1 cpe:/a:jupyter:notebook:5.0.0:- cpe:/a:jupyter:notebook:5.0.0:b1 cpe:/a:jupyter:notebook:5.0.0:b2 cpe:/a:jupyter:notebook:5.0.0:rc1 cpe:/a:jupyter:notebook:5.0.0:rc2 cpe:/a:jupyter:notebook:5.1.0:- cpe:/a:jupyter:notebook:5.1.0:rc1 cpe:/a:jupyter:notebook:5.1.0:rc2 cpe:/a:jupyter:notebook:5.1.0:rc3 cpe:/a:jupyter:notebook:5.2.0:- cpe:/a:jupyter:notebook:5.2.0:rc1 cpe:/a:jupyter:notebook:5.2.1:- cpe:/a:jupyter:notebook:5.2.1:rc1 cpe:/a:jupyter:notebook:5.2.2 cpe:/a:jupyter:notebook:5.3.0:- cpe:/a:jupyter:notebook:5.3.0:rc1 cpe:/a:jupyter:notebook:5.3.1 cpe:/a:jupyter:notebook:5.4.0 cpe:/a:jupyter:notebook:5.4.1 cpe:/a:jupyter:notebook:5.5.0:- cpe:/a:jupyter:notebook:5.5.0:rc1 cpe:/a:jupyter:notebook:5.6.0:- cpe:/a:jupyter:notebook:5.6.0:rc1 cpe:/a:jupyter:notebook:5.7.0 CVE-2018-19351 2018-11-18T12:29:00.267-05:00 2018-12-17T14:28:41.173-05:00 4.3 NETWORK MEDIUM NONE NONE PARTIAL NONE http://nvd.nist.gov 2018-12-17T12:44:08.847-05:00 MISC https://github.com/jupyter/notebook/blob/master/docs/source/changelog.rst MISC https://github.com/jupyter/notebook/commit/107a89fce5f413fb5728c1c5d2c7788e1fb17491 MISC https://groups.google.com/forum/#!topic/jupyter/hWzu2BSsplY MISC https://pypi.org/project/notebook/#history Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. In other words, nbconvert endpoints can execute JavaScript with access to the server API. In notebook/nbconvert/handlers.py, NbconvertFileHandler and NbconvertPostHandler do not set a Content Security Policy to prevent this.