Bugzilla – Bug 1214730
VUL-0: CVE-2023-39968: python-jupyter-server: Open Redirect vulnerability
Last modified: 2024-05-29 12:17:19 UTC
CVE-2023-39968 jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39968 https://www.cve.org/CVERecord?id=CVE-2023-39968 https://github.com/jupyter-server/jupyter_server/commit/290362593b2ffb23c59f8114d76f77875de4b925 https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-r726-vmfq-j9j3
Affected: - SUSE:ALP:Source:Standard:1.0/python-jupyter-server 2.5.0 - openSUSE:Factory/python-jupyter-server 2.6.0
This is an autogenerated message for OBS integration: This bug (1214730) was mentioned in https://build.opensuse.org/request/show/1107864 Factory / python-jupyter-server
https://build.suse.de/request/show/306404, I hope it is the correct workflow
done, closing