CVE-2023-40170

Medium

Description

jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs could allow exposure of certain file contents, or accessing files when opening untrusted files via "Open image in new tab". This issue has been addressed in commit `87a49272728` which has been included in release `2.7.2`. Users are advised to upgrade. Users unable to upgrade may use the lower performance `--ContentsManager.files_handler_class=jupyter_server.files.handlers.FilesHandler`, which implements the correct checks.

SeverityMedium

CVSS4.6

Exploit probability—

ProductJupyter Server

PublishedAug 28, 2023

First seenAug 28, 2023

Weakness typeCWE-284Improper access control CWE-306Missing authentication for critical function

How to fix

Update

jupyter jupyter_server2.7.2 or later
jupyter-server2.7.2 or later

Affected products

Product	Affected versions	Fixed in
jupyter jupyter_server	v < 2.7.2	2.7.2
jupyter-serverPyPI	v < 2.7.2	2.7.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.