VDB
KO
MEDIUM 6.5

GHSA-4m77-cmpx-vjc4

JupyterLab vulnerable to SXSS in Markdown Preview

Details

### Impact

The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature.

A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user.

### Patches

JupyterLab v4.0.11 was patched.

### Workarounds

Users can either disable the table of contents extension by running:

```bash jupyter labextension disable @jupyterlab/toc-extension:registry ```

### References

Vulnerability reported via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / jupyterlab
Introduced in: 4.0.0 Fixed in: 4.0.11
Fix pip install --upgrade 'jupyterlab>=4.0.11'
PyPI / notebook
Introduced in: 7.0.0 Fixed in: 7.0.7
Fix pip install --upgrade 'notebook>=7.0.7'

References