CVE-2019-9644 - CVE House
Back to Database
Status published Medium CVE-2019-9644

An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6...

Vulnerability Description

An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of error messages, though not reproduced with other browsers. This occurs because Internet Explorer's error messages can include the content of any invalid JavaScript that was encountered.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-9644

Credits & Attribution

No credits recorded in the NVD database.

References

More from jupyter

View All →
CVE-2025-53000
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
High 8.5
CVE-2025-30167
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
High 7.3
CVE-2025-23205
`frame-ancestors: self` grants all users access to formgrader in nbgrader
Medium 6.9
CVE-2022-39286
Execution with Unnecessary Privileges in JupyterApp
High 8.8
CVE-2022-29238
Forced Browsing in Jupyter Notebook
Medium 4.3

Affected Vendor

Affected Software

notebook
Vulnerable Versions:
0

Timeline

Official Publish: March 12th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.