DEBIAN-CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

UBUNTU-CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

CVE-2020-36191

CVE-2020-36191 affects JupyterHub 1.1.0 where CSRF is possible in the admin panel via a request that omits the _xsrf field, demonstrated by a /hub/api/user request for adding or removing a user account. The issue is a CSRF vulnerability in the admin interface that can be exploited by authenticate...