p PatchFirst

CVE-2015-4707

CVE-2015-4707

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

CVSS 6.1 · Medium · EPSS 2.3% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ipython Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • ipython Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • ipython Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.1-1

    Update to 2.4.1-1

  • ipython PyPI

    Versions
    • 0.10
    • 0.10.1
    • 0.10.2
    • 0.11
    • 0.12
    • 0.12.1
    • 0.13
    • 0.13.1
    • 0.13.2
    • 0.6.10
    • 0.6.11
    • 0.6.12
    • 0.6.13
    • 0.6.14
    • 0.6.15
    • 0.6.4
    • 0.6.5
    • 0.6.6
    • 0.6.7
    • 0.6.8
    • 0.6.9
    • 0.7.0
    • 0.7.1
    • 0.7.1.fix1
    • 0.7.2
    • 0.7.3
    • 0.7.4.svn.r2010
    • 0.8.0
    • 0.8.1
    • 0.8.2
    • 0.8.3
    • 0.8.4
    • 0.9
    • 0.9.1
    • 1.0.0
    • 1.1.0
    • 1.2.0
    • 1.2.1
    • 2.0.0
    • 2.1.0
    • 2.2.0
    • 2.3.0
    • 2.3.1
    • 2.4.0
    • 2.4.1
    • 3.0.0
    • 3.1.0
    Affected ranges
    • ECOSYSTEM: < 3.2.0

    Update to 3.2.0

  • ipython PyPI

    Versions
    • 0.10
    • 0.10.1
    • 0.10.2
    • 0.11
    • 0.12
    • 0.12.1
    • 0.13
    • 0.13.1
    • 0.13.2
    • 0.6.10
    • 0.6.11
    • 0.6.12
    • 0.6.13
    • 0.6.14
    • 0.6.15
    • 0.6.4
    • 0.6.5
    • 0.6.6
    • 0.6.7
    • 0.6.8
    • 0.6.9
    • 0.7.0
    • 0.7.1
    • 0.7.1.fix1
    • 0.7.2
    • 0.7.3
    • 0.7.4.svn.r2010
    • 0.8.0
    • 0.8.1
    • 0.8.2
    • 0.8.3
    • 0.8.4
    • 0.9
    • 0.9.1
    • 1.0.0
    • 1.1.0
    • 1.2.0
    • 1.2.1
    • 2.0.0
    • 2.1.0
    • 2.2.0
    • 2.3.0
    • 2.3.1
    • 2.4.0
    • 2.4.1
    • 3.0.0
    • 3.1.0
    Affected ranges
    • {"events": [{"introduced": "0"}, {"fixed": "c2078a53543ed502efd968649fee1125e0eb549c"}, {"fixed": "7222bd53ad089a65fd610fab4626f9d0ab47dfce"}], "repo": "https://github.com/ipython/ipython", "type": "GIT"}
    • ECOSYSTEM: < 3.2.0

    Update to 3.2.0

Original sources

Check your server →