Open redirect in Jupyter Notebook

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L

指向未可信站点的URL重定向(开放重定向)

Jupyter Notebook 输入验证错误漏洞

Jupyter Notebook是一套用于创建、共享代码和说明性文本文档的开源Web应用程序。 Jupyter Notebook 6.1.5之前版本存在输入验证错误漏洞，该漏洞源于有一个开放重定向漏洞。一个恶意制作的笔记本服务器链接可能会将浏览器重定向到另一个网站。

N/A

N/A