PYSEC-2020-234
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/jupyter-server/PYSEC-2020-234.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2020-234
- Aliases
- Published
- 2020-11-24T21:15:00Z
- Modified
- 2023-11-08T04:03:15.400330Z
- Summary
- [none]
- Details
-
Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may appear safe, but ultimately redirect to a spoofed server on the public internet.
- References
Affected packages
PyPI / jupyter-server
Package
- Name
- jupyter-server
- View open source insights on deps.dev
- Purl
- pkg:pypi/jupyter-server