漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Stored cross site scripting in Markdown Preview in JupyterLab
Vulnerability Description
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
JupyterLab 安全漏洞
Vulnerability Description
JupyterLab是一个用于交互式和可重复计算的可扩展环境，基于 Jupyter Notebook 和架构。 JupyterLab存在安全漏洞。攻击者利用该漏洞可以访问任何数据，并执行任意请求。
CVSS Information
N/A
Vulnerability Type
N/A