CVE-2018-21030

CVE-2018-21030

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.

Source: CVE-2018-21030

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다