jupyter-server vulnerabilities (Ubuntu)
17 vulnerabilities.
-
jupyter-serverUbuntu Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization 8.8 High -
jupyter-serverUbuntu Jupyter Server: 5xx request logging leaks token-bearing Referer header values 7.1 High -
jupyter-serverUbuntu Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP 9.3 Critical -
jupyter-serverUbuntu CORS Origin Validation Bypass in jupyter-server 6.1 Medium -
jupyter-serverUbuntu Path Traversal in jupyter/jupyter 6.8 Medium -
jupyter-serverUbuntu jupyter-server authentication cookies remain valid after password reset due to static cookie secret 7.6 High -
jupyter-serverUbuntu jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat 7.6 High -
jupyter-serverUbuntu jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix 7.6 High -
jupyter-serverUbuntu jupyter_server next parameter open redirect can redirect users to external domains 6.3 Medium -
jupyter-serverUbuntu Jupyter server on Windows discloses Windows user password hash 7.5 High -
jupyter-serverUbuntu jupyter-scheduler's endpoint is missing authentication 5.3 Medium -
jupyter-serverUbuntu Jupyter Server errors include tracebacks with path information 3.5 Low -
jupyter-serverUbuntu Open Redirect Vulnerability in jupyter-server 4.3 Medium -
jupyter-serverUbuntu cross-site inclusion (XSSI) of files in jupyter-server 4.6 Medium -
jupyter-serverUbuntu Known or guessable hidden files may be accessed in Jupyter Server 7.1 High -
jupyter-serverUbuntu Sensitive Auth & Cookie data stored in Jupyter server logs 7.5 High -
jupyter-serverUbuntu Open redirect vulnerability 6.1 Medium