CVE-2021-41194

CVE-2021-41194 affects the JupyterHub integration FirstUseAuthenticator. In versions prior to 1.0.0, if create_users = True and a user name is known or guessed, an attacker could gain unauthorized access to any user’s account. Mitigation: upgrade to version 1.0.0 or apply the patch referenced in ...

CVE-2021-41194 Improper Access Control in jupyterhub-firstuseauthenticator

FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in versions prior to 1.0.0 allows unauthorized access to any user's account if createusers=True and t...