CVE-2023-39968CWE-601

Open Redirect Vulnerability in jupyter-server

Medium · published August 28, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00681 · 51.8th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2023-08-28T20:16Z
EPSS history
Timeline
  • 28 AUG 20:16Z
    Open Redirect Vulnerability in jupyter-server
    cvelistv5