ChainPyPI:ipython
ipython: successive fixes (2015–2018)
5 CVEs over 3 generations, 29 Sep 2015 to 18 Nov 2018.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2015-733729 Sep 2015 First in the chain
- CVE-2015-470720 Sep 2017 related to CVE-2015-7337
- CVE-2015-560720 Sep 2017 related to CVE-2015-4706related to CVE-2015-4707and 1 more
- CVE-2015-470621 Sep 2017 related to CVE-2015-7337
- CVE-2018-1935218 Nov 2018 related to CVE-2015-7337
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2015-7337 | 29 Sep 2015 | The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute… · fixed in 3.2.2 | First in chain | 16.9 |
| CVE-2015-4707 | 20 Sep 2017 | Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script… · fixed in 3.2.0 | CVE-2015-7337 · related · Medium | 16.6 |
| CVE-2015-5607 | 20 Sep 2017 | Cross-site request forgery in the REST API in IPython 2 and 3 · fixed in 3.2.3 | CVE-2015-4706 · related · High | 13.7 |
| CVE-2015-4706 | 21 Sep 2017 | Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web… · fixed in 3.2.0 | CVE-2015-7337 · related · Medium | 16.3 |
| CVE-2018-19352 | 18 Nov 2018 | Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js… · fixed in 5.7.2 | CVE-2015-7337 · related · Medium | 14.2 |