Information Disclosure

2023-12-0507:03:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

jupyter_server

information disclosure

unhandled errors

api requests

sensitive path information

authenticated users

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

33.4%

JSON

jupyter_server is vulnerable to Information Disclosure. An information disclosure flaw exists due to unhandled errors in API requests. While not directly allowing unauthorized access, these errors may leak sensitive path information in responses, potentially revealing sensitive server details to authenticated users with existing execution permissions.