Improper Access Control

jupyter-server is vulnerable to Improper Access Control. The vulnerability occurs due to not implementing authorization check when opening untrusted files via "Open image in new tab" feature of the browser. The attacker can access unauthorized files compromising users confidentiality...