CVE-2022-24757: high-severity vulnerability in jupyter-server jupyter_server
Sensitive Auth & Cookie data stored in Jupyter server logs
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 1.3%
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter Server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter Server version 1.15.4 contains a patch for this issue. There are currently no known workarounds.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
jupyter-server · jupyter_serverRelated CVEs — jupyter-server jupyter_server
In the same product, most dangerous first.
CVE-2020-26275MEDIUMOpen redirect vulnerabilityEPSS 1.4%CVE-2022-29241HIGHKnown or guessable hidden files may be accessed in Jupyter ServerEPSS 1.0%CVE-2023-49080LOWJupyter Server errors include tracebacks with path informationEPSS 0.8%CVE-2024-35178HIGHJupyter server on Windows discloses Windows user password hashEPSS 0.8%CVE-2023-39968MEDIUMOpen Redirect Vulnerability in jupyter-serverEPSS 0.7%CVE-2023-40170MEDIUMcross-site inclusion (XSSI) of files in jupyter-serverEPSS 0.6%