Vulnerabilities

TI-2024-23295 CVE-2024-35225 · GHSA-fvcq-4x64-hqxr

Jupyter Server Proxy has a reflected XSS issue in host parameter

MEDIUM 43

Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.00442 Published 2024-06-11 Fixed in 3.2.4, 4.2.0 CWE-116

TI-2024-18755 CVE-2024-28179 · GHSA-w3vc-fx9p-wp4v

MEDIUM 44

Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01021 Published 2024-03-20 Fixed in 4.1.1, 3.2.3 CWE-306

TI-2022-06073 CVE-2022-21697 · GHSA-gcv9-6737-pjqw

LOW 33

Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01096 Published 2022-01-25 Fixed in 3.2.1 CWE-918