24 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-41942
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the...
CVE-2022-41942
Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the gitserver service, present in all Sourcegraph deployments. This vulnerability was caused by a lack of input validation on the host parameter of the /list-gitolite endpoint. It...
CVE-2024-41942
creationtimestamp| type| source ---|---|--- 2024-08-08 18:04:36+00:00| seen| https://t.me/cvedetector/2796...
cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2024-41942 via jupyterhub (1.3.0)
jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...
jhub-shibboleth-auth (1.2.0) potentially affected by CVE-2024-41942 via jupyterhub (0.9.1)
jupyterhub PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.2.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...
swanhub (1.0.0), swannotificationsservice (1.0.0) potentially affected by CVE-2024-41942 via jupyterhub (4.0.2)
jupyterhub PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - swanhub 1.0.0 - swannotificationsservice 1.0.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...
CVE-2024-41942 vulnerabilities
Vulnerabilities for packages: py3-jupyterhub...
jhub-shibboleth-auth (1.4.0) potentially affected by CVE-2024-41942 via jupyterhub (0.9.4)
jupyterhub PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.4.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...
jhub-shibboleth-auth (1.1.0) potentially affected by CVE-2024-41942 via jupyterhub (0.9.0)
jupyterhub PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...
jhub-shibboleth-auth (1.5.0), jupyterhub-ltiauthenticator (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2024-41942 via jupyterhub (0.9.6)
jupyterhub PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.5.0 - jupyterhub-ltiauthenticator =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2024-41942 Source advisory:...
cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2024-41942 via jupyterhub (1.1.0)
jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...
rubin-jupyter-utils-lab (>=0.10.0, <=0.13.0), swannotificationsservice (0.1.0) potentially affected by CVE-2024-41942 via jupyterhub (1.5.1)
jupyterhub PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - rubin-jupyter-utils-lab =0.10.0, =0.13.0 - swannotificationsservice 0.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-84...
jhub-shibboleth-auth (1.0.0) potentially affected by CVE-2024-41942 via jupyterhub (0.8.1)
jupyterhub PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.0.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...
CVE-2024-41942 JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the admin:users scope, they may escalate their own privileges by making themselves a full admin user. The impact is relatively small in that...
CVE-2023-41942
creationtimestamp| type| source ---|---|--- 2024-01-03 12:30:24+00:00| seen| https://t.me/arpsyndicate/2319...
CVE-2023-41942
A cross-site request forgery CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue...
CVE-2023-41942
A cross-site request forgery CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue...
CVE-2023-41942
A cross-site request forgery CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue...
CVE-2023-41942
The CVE-2023-41942 entry concerns a CSRF vulnerability in the Jenkins AWS CodeCommit Trigger Plugin. Affected software: Jenkins AWS CodeCommit Trigger Plugin versions 3.0.12 and earlier. Root cause: cross-site request forgery that enables an attacker to clear the SQS queue. Impact: described as a...