netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-r726-vmfq-j9j3

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-03 17:50:46 +00:00
parent 5ab56cad94
commit 8a8c4c5995
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/08/GHSA-r726-vmfq-j9j3/GHSA-r726-vmfq-j9j3.json
+6 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r726-vmfq-j9j3",
"modified": "2023-09-01T17:44:16Z",
"modified": "2024-07-03T17:49:11Z",
"published": "2023-08-29T23:34:22Z",
"aliases": [
"CVE-2023-39968"
],
"summary": " Open Redirect Vulnerability in jupyter-server",
"details": "### Impact\n\nOpen Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.\n\n\n### Patches\n\nUpgrade to Jupyter Server 2.7.2\n\n### Workarounds\n\nNone.\n\n### References\n\nVulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).\n\n- https://blog.xss.am/2023/08/CVE-2023-39968-jupyter-token-leak/\n",
"details": "### Impact\n\nOpen Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.\n\n\n### Patches\n\nUpgrade to Jupyter Server 2.7.2\n\n### Workarounds\n\nNone.\n\n### References\n\nVulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).\n\n- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/\n",
"severity": [
{
"type": "CVSS_V3",
@@ -48,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/jupyter-server/jupyter_server/commit/290362593b2ffb23c59f8114d76f77875de4b925"
},
{
"type": "WEB",
"url": "https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak"
},
{
"type": "PACKAGE",
"url": "https://github.com/jupyter-server/jupyter_server"