CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.1%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2021-32862

Jupyter » Nbconvert » Version: 4.0.0

cpe:2.3:a:jupyter:nbconvert:4.0.0
Jupyter » Nbconvert » Version: 4.1.0

cpe:2.3:a:jupyter:nbconvert:4.1.0
Jupyter » Nbconvert » Version: 4.2.0

cpe:2.3:a:jupyter:nbconvert:4.2.0
Jupyter » Nbconvert » Version: 4.3.0

cpe:2.3:a:jupyter:nbconvert:4.3.0
Jupyter » Nbconvert » Version: 5.0.0

cpe:2.3:a:jupyter:nbconvert:5.0.0
Jupyter » Nbconvert » Version: 5.1

cpe:2.3:a:jupyter:nbconvert:5.1
Jupyter » Nbconvert » Version: 5.1.0

cpe:2.3:a:jupyter:nbconvert:5.1.0
Jupyter » Nbconvert » Version: 5.1.1

cpe:2.3:a:jupyter:nbconvert:5.1.1
Jupyter » Nbconvert » Version: 5.2.1

cpe:2.3:a:jupyter:nbconvert:5.2.1
Jupyter » Nbconvert » Version: 5.3.0

cpe:2.3:a:jupyter:nbconvert:5.3.0
Jupyter » Nbconvert » Version: 5.3.1

cpe:2.3:a:jupyter:nbconvert:5.3.1
Jupyter » Nbconvert » Version: 5.4

cpe:2.3:a:jupyter:nbconvert:5.4
Jupyter » Nbconvert » Version: 5.4.1

cpe:2.3:a:jupyter:nbconvert:5.4.1
Jupyter » Nbconvert » Version: 5.5

cpe:2.3:a:jupyter:nbconvert:5.5
Jupyter » Nbconvert » Version: 5.5.0

cpe:2.3:a:jupyter:nbconvert:5.5.0
Jupyter » Nbconvert » Version: 5.6.0

cpe:2.3:a:jupyter:nbconvert:5.6.0
Jupyter » Nbconvert » Version: 5.6.1

cpe:2.3:a:jupyter:nbconvert:5.6.1
Jupyter » Nbconvert » Version: 6.0.0

cpe:2.3:a:jupyter:nbconvert:6.0.0
Jupyter » Nbconvert » Version: 6.0.1

cpe:2.3:a:jupyter:nbconvert:6.0.1
Jupyter » Nbconvert » Version: 6.0.2

cpe:2.3:a:jupyter:nbconvert:6.0.2
Jupyter » Nbconvert » Version: 6.0.3

cpe:2.3:a:jupyter:nbconvert:6.0.3
Jupyter » Nbconvert » Version: 6.0.4

cpe:2.3:a:jupyter:nbconvert:6.0.4
Jupyter » Nbconvert » Version: 6.0.5

cpe:2.3:a:jupyter:nbconvert:6.0.5
Jupyter » Nbconvert » Version: 6.0.6

cpe:2.3:a:jupyter:nbconvert:6.0.6
Jupyter » Nbconvert » Version: 6.0.7

cpe:2.3:a:jupyter:nbconvert:6.0.7
Jupyter » Nbconvert » Version: 6.1.0

cpe:2.3:a:jupyter:nbconvert:6.1.0
Jupyter » Nbconvert » Version: 6.1.1

cpe:2.3:a:jupyter:nbconvert:6.1.1
Jupyter » Nbconvert » Version: 6.2.0

cpe:2.3:a:jupyter:nbconvert:6.2.0
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32862

Products

Pricing

Contact Us