CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user…

published January 13, 2021

CVSS
—
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Published
2021-01-13T03:36Z
EPSS history
Timeline
  • 13 JAN 03:36Z
    JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user…
    cvelistv5