Jupyter Server 安全漏洞

Jupyter Server is an application used by the Jupyter organization to provide back-end services for Jupyter Web applications. A security vulnerability exists in the Jupyter Server Proxy that stems from not properly checking user authentication, which could allow unauthenticated access by anyone wi...

PT-2024-2426 · Unknown · Jupyter Server Proxy

Name of the Vulnerable Software and Affected Versions: Jupyter Server Proxy versions prior to 3.2.3 Jupyter Server Proxy versions prior to 4.1.1 Description: The issue is related to the lack of proper user authentication when proxying websockets in Jupyter Server Proxy. This allows unauthenticate...

grid2viz (>=1.1.0 <=1.3.1), trenchripper (>=0.1.4 <=0.2.1) potentially affected by CVE-2022-21697 via jupyter-server-proxy (>=1.3.2 <=1.6.0)

jupyter-server-proxy PYPI version =1.3.2, =1.1.0, =0.1.4, =0.2.1 Source cves: CVE-2022-21697 Source advisory: OSV:GHSA-GCV9-6737-PJQW...

SSRF vulnerability in jupyter-server-proxy

Impact What kind of vulnerability is it? Server-Side Request Forgery SSRF Who is impacted? Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled. A lack of input validation allowed authenticated clients to proxy requests to other hosts, bypassing the allowedhos...

Server-Side Request Forgery (SSRF)

jupyterserverproxy is vulnerable to server side request forgery. The vulnerability exists due to a lack of validation of the allowedhosts allowing an attacker to bypass the authentication for terminal execution...

CVE-2022-21697

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

grid2viz (>=1.1.0 <=1.3.1), trenchripper (>=0.1.4 <=0.2.1) potentially affected by CVE-2022-21697 via jupyter-server-proxy (>=1.3.2 <=1.6.0)

jupyter-server-proxy PYPI version =1.3.2, =1.1.0, =0.1.4, =0.2.1 Source cves: CVE-2022-21697 Source advisory: OSV:PYSEC-2022-16...

CVE-2022-21697

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

PYSEC-2022-16

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

Server side request forgery (ssrf)

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

PYSEC-2022-16

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

CVE-2022-21697 SSRF vulnerability (requires authentication)

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

CVE-2022-21697 SSRF vulnerability (requires authentication)

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

CVE-2022-21697 SSRF vulnerability (requires authentication)

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery SSRF. Any user deploying Jupyter Server or Notebook with jupyter-proxy-server extension enabled is affected. A lack of...

CVE-2022-21697

Jupyter Server Proxy (jupyter-proxy-server) is affected by an SSRF vulnerability in versions before 3.2.1. A lack of input validation allows authenticated users with the extension enabled to proxy requests to arbitrary hosts, bypassing the allowed_hosts check. The issue requires authentication, w...