3 matches found
Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
Summary Jupyter Server's gateway WebSocket handler checks that a user is authenticated, but it does not ask the configured Authorizer whether that user may execute kernels. In Jupyter Server 2.0.0 through 2.5.0, enabling GatewayClient.url automatically replaced the normal kernel channel handler...
8.8CVSS5.9AI score0.00386EPSS
SaveExploits0References6Affected Software1
20