In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4855-1 advisory.

    It was discovered that IPython did not properly sanitize certain input. If a user were tricked into     opening a specially crafted notebook file, a remote attacker could possibly use this issue to execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in jupyter-notebook.

CVE-2018-8768

A maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

CVE-2018-19351

allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server.

CVE-2018-21030

jupyter-notebook does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.

For Debian 9 stretch, these problems have been fixed in version 4.2.3-4+deb9u1.

We recommend that you upgrade your jupyter-notebook packages.

For the detailed security status of jupyter-notebook please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/jupyter-notebook

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-8768

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

MITRE reports :

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context.
Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

ID	Name	Product	Family	Severity
183551	Ubuntu 16.04 ESM : IPython vulnerability (USN-4855-1)	Nessus	Ubuntu Local Security Checks	high
143107	Debian DLA-2432-1 : jupyter-notebook security update	Nessus	Debian Local Security Checks	high
120282	Fedora 28 : python-notebook (2018-1fdcb294e3)	Nessus	Fedora Local Security Checks	high
108737	Fedora 26 : python-notebook (2018-ddb95c8324)	Nessus	Fedora Local Security Checks	high
108735	Fedora 27 : python-notebook (2018-b621d86462)	Nessus	Fedora Local Security Checks	high
108477	FreeBSD : Jupyter Notebook -- vulnerability (b3edc7d9-9af5-4daf-88f1-61f68f4308c2)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2018-8768

high

Tenable Plugins

high

high

high

high

high

high