Threats tagged 'bit-jupyterlab-2024-43805'

CVE-2024-43805 is an HTML injection vulnerability in Jupyter Notebook and JupyterLab that enables DOM Clobbering. It requires user interaction by opening a malicious notebook or Markdown file preview. Exploitation allows an attacker to access data available to the victim and perform arbitrary requests as that user. Official patches are available in JupyterLab versions 3.6.8 and 4.2.5, and Jupyter Notebook version 7.2.2. No full workaround exists, but disabling certain plugins can reduce risk for those unable to update promptly.