ipython: cross-site scripting
| Package(s): | ipython | CVE #(s): | CVE-2015-6938 | ||||||||||||||||
| Created: | September 15, 2015 | Updated: | October 8, 2015 | ||||||||||||||||
| Description: | From the Mageia advisory:
In IPython, local folder name was used in HTML templates without escaping, allowing XSS in said pages by carefully crafting folder name and URL to access it. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||