From 777f921986bb892bb1aaf1190f69dc443189089b Mon Sep 17 00:00:00 2001 From: CVE Team Date: Tue, 12 Mar 2019 04:39:02 -0400 Subject: [PATCH] - Synchronized data. --- 2019/9xxx/CVE-2019-9644.json | 48 ++++++++++++++++++++++++++++++++++-- 1 file changed, 46 insertions(+), 2 deletions(-) diff --git a/2019/9xxx/CVE-2019-9644.json b/2019/9xxx/CVE-2019-9644.json index 70403b519a0..be319c28509 100644 --- a/2019/9xxx/CVE-2019-9644.json +++ b/2019/9xxx/CVE-2019-9644.json @@ -2,7 +2,30 @@ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2019-9644", - "STATE" : "RESERVED" + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } }, "data_format" : "MITRE", "data_type" : "CVE", @@ -11,7 +34,28 @@ "description_data" : [ { "lang" : "eng", - "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value" : "An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of error messages, though not reproduced with other browsers. This occurs because Internet Explorer's error messages can include the content of any invalid JavaScript that was encountered." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "https://github.com/jupyter/notebook/compare/f3f00df...05aa4b2", + "refsource" : "MISC", + "url" : "https://github.com/jupyter/notebook/compare/f3f00df...05aa4b2" } ] }