CVE-2023-51277

nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds.
Configurations

Configuration 1 (hide)

cpe:2.3:a:tinowagner:jupyter_notebook_viewer:*:*:*:*:*:macos:*:*

History

21 Nov 2024, 08:37

Type Values Removed Values Added
References () https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087731 - Not Applicable () https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087731 - Not Applicable
References () https://github.com/tuxu/nbviewer-app/commit/dc1e4ddf64c78e13175a39b076fa0646fc62e581 - Patch () https://github.com/tuxu/nbviewer-app/commit/dc1e4ddf64c78e13175a39b076fa0646fc62e581 - Patch
References () https://github.com/tuxu/nbviewer-app/compare/0.1.5...0.1.6 - Product () https://github.com/tuxu/nbviewer-app/compare/0.1.5...0.1.6 - Product
References () https://www.youtube.com/watch?v=c0nawqA_bdI - Exploit, Third Party Advisory () https://www.youtube.com/watch?v=c0nawqA_bdI - Exploit, Third Party Advisory

05 Jan 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-05 05:15

Updated : 2025-06-03 15:15


NVD link : CVE-2023-51277

Mitre link : CVE-2023-51277

CVE.ORG link : CVE-2023-51277


JSON object : View

Products Affected

tinowagner

  • jupyter_notebook_viewer