CVE-2023-49080

creationtimestamp| type| source ---|---|--- 2023-12-23 11:41:48+00:00| seen| https://t.me/ctinow/158781...

Fedora 39 : python-jupyter-server (2023-5beead493f)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5beead493f advisory. Security fix for CVE-2023-49080 rhbz2252897 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

acryl-datahub-gx-plugin (>=0.14.0.3 <=1.1.1rc4), aepsych (>=0.3.0 <=0.4.0) +288 more potentially affected by CVE-2023-49080 via jupyter-server (>=0.0.5 <=2.10.1)

jupyter-server PYPI version =0.0.5, =0.14.0.3, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =1.0.1, =0.1.0, =0.2.2, =0.0.2, =0.0.2, =0.0.11 and more Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

CVE-2023-49080 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

acryl-datahub-gx-plugin (>=0.14.0.3 <=1.1.1rc4), aepsych (>=0.3.0 <=0.4.0) +288 more potentially affected by CVE-2023-49080 via jupyter-server (>=0.0.5 <=2.10.1)

jupyter-server PYPI version =0.0.5, =0.14.0.3, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =1.0.1, =0.1.0, =0.2.2, =0.0.2, =0.0.2, =0.0.11 and more Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...

CVE-2023-49080 Jupyter Server errors include tracebacks with path information

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

CVE-2023-49080

The CVE-2023-49080 issue affects the Jupyter Server backend (APIs/REST endpoints for Jupyter notebook, JupyterLab, Voila). Unhandled API request errors from authenticated users may include traceback information (potential path disclosure). There is no known way to trigger these errors without aut...