GHSA-rcx2-m7jp-p9wj

Source

https://github.com/advisories/GHSA-rcx2-m7jp-p9wj

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/04/GHSA-rcx2-m7jp-p9wj/GHSA-rcx2-m7jp-p9wj.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-rcx2-m7jp-p9wj

Aliases

Published

2019-04-09T19:47:27Z

Modified

2024-09-26T14:43:51.423817Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N CVSS Calculator

Summary

Jupyter Notebook open redirect vulnerability

Details

In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.

Database specific

{
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-601"
    ],
    "github_reviewed_at": "2020-06-16T21:54:28Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
}

References

Affected packages

PyPI / notebook

Package

Name: notebook; View open source insights on deps.dev
Purl: pkg:pypi/notebook

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.7.8

Affected versions

0.*

0.0.0

4.*

4.0.0

4.0.1

4.0.2

4.0.4

4.0.5

4.0.6

4.1.0

4.2.0b1

4.2.0

4.2.1

4.2.2

4.2.3

4.3.0

4.3.1

4.3.2

4.4.0

4.4.1

5.*

5.0.0b1

5.0.0b2

5.0.0rc1

5.0.0rc2

5.0.0

5.1.0rc1

5.1.0rc2

5.1.0rc3

5.1.0

5.2.0rc1

5.2.0

5.2.1rc1

5.2.1

5.2.2

5.3.0rc1

5.3.0

5.3.1

5.4.0

5.4.1

5.5.0rc1

5.5.0

5.6.0rc1

5.6.0

5.7.0

5.7.1

5.7.2

5.7.3

5.7.4

5.7.5

5.7.6