Threats tagged 'brew-jupyterlab-cve-2024-22420'

CVE-2024-22420 is a cross-site scripting (XSS) vulnerability in JupyterLab that arises from improper neutralization of input during web page generation. The vulnerability can be triggered when a user opens a malicious notebook containing Markdown cells or previews a malicious Markdown file. Exploitation allows an attacker to access any data available to the victim and perform arbitrary requests on their behalf. JupyterLab version 4.0.11 includes a patch that addresses this issue. As a workaround, users can disable the table of contents extension to mitigate the risk.