CVE-2019-10255 — Vulnetix

Try Vulnetix Request Demo

CVE-2019-10255 PUBLISHED

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.

EPSS 0.46% · 64.0th percentile

Risk Scores

EPSS Score

0.46%

64.0th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:18.04:LTS	jupyter-notebook	0, 4.2.3-4, 5.1.0-2

Timeline

Mar 28, 2019 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score

References

https://ubuntu.com/security/CVE-2019-10255 third-party-advisory
https://github.com/jupyter/notebook/commit/08c4c898182edbe97aadef1815cce50448f975cb third-party-advisory
https://github.com/jupyter/notebook/commit/70fe9f0ddb3023162ece21fbb77d5564306b913b third-party-advisory
https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4 third-party-advisory
https://github.com/jupyter/notebook/commit/979e0bd15e794ceb00cc63737fcd5fd9addc4a99 third-party-advisory
https://ubuntu.com/security/notices/USN-5585-1 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2019-10255 third-party-advisory

Open in Interactive Console →