CVE-2020-26215
Open redirect in Jupyter Notebook
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.4EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Nov 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
Affected products
jupyter · notebookWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →