Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:26 a.m.3 views

SUSE CVE-2022-29241

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

8.8CVSS8.3AI score0.00846EPSS
Exploits0References4
vulnersOsv
vulnersOsv
added 2022/06/16 11:13 p.m.8 views

aiidalab-widgets-base (>=1.3.4 <=2.0.0a1), appyter (>=0.18.3 <=0.18.11) +53 more potentially affected by CVE-2022-29241 via jupyter-server (>=0.0.5 <=1.17.0)

jupyter-server PYPI version =0.0.5, =1.3.4, =0.18.3, =0.0.0, =0.1.0rc1, =0.0.1.post7, =0.1.2, =1.2.0, =0.0.0, =0.0.1.dev7, =0.1.7, =0.1.1.10, =0.1.6.2, =0.3.0, =0.6.0 and more Source cves: CVE-2022-29241 Source advisory: OSV:GHSA-Q874-G24W-4Q9G...

9CVSS7.2AI score0.00846EPSS
Exploits0
Circl
Circl
added 2022/06/15 12:19 a.m.5 views

CVE-2022-29241

creationtimestamp| type| source ---|---|--- 2022-06-15 00:19:32+00:00| seen| https://t.me/cibsecurity/44470...

9CVSS8AI score0.00846EPSS
Exploits0References1
Wolfi
Wolfi
added 2022/06/14 9:15 p.m.11 views

CVE-2022-29241 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

9CVSS7.1AI score0.00846EPSS
Exploits0
Chainguard
Chainguard
added 2022/06/14 9:15 p.m.50 views

CVE-2022-29241 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

9CVSS8.8AI score0.00846EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2022/06/14 8:40 p.m.9 views

CVE-2022-29241 Known or guessable hidden files may be accessed in Jupyter Server

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

7.1CVSS8.3AI score0.00846EPSS
Exploits0References1
CVE
CVE
added 2022/06/14 8:40 p.m.908 views

CVE-2022-29241

CVE-2022-29241 affects Jupyter Server (backend for Jupyter web apps) prior to 1.17.1. If notebook_server is started with root_dir containing the starting user’s home directory, an authenticated user can leak the start-time access token via the REST API by guessing/brute-forcing the server PID. Th...

9CVSS7.5AI score0.00846EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/14 8:40 p.m.44 views

CVE-2022-29241 Known or guessable hidden files may be accessed in Jupyter Server

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

7.1CVSS8.6AI score0.00846EPSS
Exploits0References1
Rows per page
Query Builder