tocsin

Debian/ipython: medium 6.1

Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

Action: Upgrade ipython to 2.4.1-1 or later.

Affected

introducedfixedlast affected
02.4.1-1-

Fixed versions

2.4.1-1

Sources

published · modified · JSON