DEBIAN-CVE-2019-10255

DEBIAN-CVE-2019-10255 PUBLISHED CVSS 6.099999904632568 MEDIUM

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.

Risk Scores

CVSS 3.0

6.099999904632568

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
Debian:14	jupyter-notebook	0, 0, 0
Debian:13	jupyter-notebook	0, 0, 0
Debian:12	jupyter-notebook	0, 0, 0
Debian:11	jupyter-notebook	0, 0, 0

Timeline

Mar 28, 2019 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2019-10255 advisory

Open in Interactive Console →