CVE-2021-27225

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...

CVE-2021-27225

In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...

Dataiku Jupyter 访问控制错误漏洞

Dataiku Jupyter is a Dataiku open source application . It provides an online editable text Dataiku DSS before 8.0.6 An Access Control Error vulnerability exists that stems from insufficient access control in the jupiter notebooks integration, which allows a user to read and overwrite notebooks in...

Out of My Depth (Where I Belong)

I remember well my first day as a member of Akamai's InfoSec department. The Friday prior, I'd just completed the Akamai Technical Academy, a five-month crash-course in all things tech, and was now, on a cold but sunny Monday morning, joining InfoSec for their weekly staff meeting. Eager to make ...

openSUSE Security Update : python-notebook (openSUSE-2021-24)

This update for python-notebook fixes the following issue : - CVE-2020-26215: Fixed an open redirect vulnerability boo1180458. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2021-24. The text descriptio...

OPENSUSE-SU-2021:0117-1 Security update for python-jupyter_notebook

This update for python-jupyternotebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability boo1180458. This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for python-jupyter_notebook (moderate)

openSUSE Security Update: Security update for python-jupyternotebook Announcement ID: openSUSE-SU-2021:0117-1 Rating: moderate References: 1180458 Cross-References: CVE-2020-26215 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description...

OPENSUSE-SU-2021:0078-1 Security update for python-jupyter_notebook

This update for python-jupyternotebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability boo1180458...

OPENSUSE-SU-2021:0024-1 Security update for python-notebook

This update for python-notebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability boo1180458...

Security update for python-notebook (moderate)

openSUSE Security Update: Security update for python-notebook Announcement ID: openSUSE-SU-2021:0024-1 Rating: moderate References: 1180458 Cross-References: CVE-2020-26215 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2020-26275

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a...

Open redirect

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a...

PYSEC-2020-50

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a...

CVE-2020-26275 Open redirect vulnerability

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a...

CVE-2020-26275

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a...

CVE-2020-26275: URL Redirection to Untrusted Site

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a...

MGASA-2020-0457 Updated jupyter-notebook packages fix a security vulnerability

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for know...

Updated jupyter-notebook packages fix a security vulnerability

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for know...

Debian: Security Advisory (DLA-2477-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2477-1 : jupyter-notebook security update

It was discovered that there was an issue in the 'jupyter-notebook' interactive notebook system where a maliciously-crafted link could redirect the browser to a malicious/spoofed website. For Debian 9 'Stretch', this problem has been fixed in version 4.2.3-4+deb9u2. We recommend that you upgrade...