CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40170

jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs could allow exposure of certain file contents, or accessing files when opening untrusted files via "Open image in new tab". This issue has been addressed in commit `87a49272728` which has been included in release `2.7.2`. Users are advised to upgrade. Users unable to upgrade may use the lower performance `--ContentsManager.files_handler_class=jupyter_server.files.handlers.FilesHandler`, which implements the correct checks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.5%

CVSS Severity

CVSS v3 Score 4.6

References

Products affected by CVE-2023-40170

Jupyter » Jupyter Server » Version: N/A

cpe:2.3:a:jupyter:jupyter_server:-
Jupyter » Jupyter Server » Version: 0.0.1

cpe:2.3:a:jupyter:jupyter_server:0.0.1
Jupyter » Jupyter Server » Version: 0.0.2

cpe:2.3:a:jupyter:jupyter_server:0.0.2
Jupyter » Jupyter Server » Version: 0.0.3

cpe:2.3:a:jupyter:jupyter_server:0.0.3
Jupyter » Jupyter Server » Version: 0.0.4

cpe:2.3:a:jupyter:jupyter_server:0.0.4
Jupyter » Jupyter Server » Version: 0.0.5

cpe:2.3:a:jupyter:jupyter_server:0.0.5
Jupyter » Jupyter Server » Version: 0.1.0

cpe:2.3:a:jupyter:jupyter_server:0.1.0
Jupyter » Jupyter Server » Version: 0.1.1

cpe:2.3:a:jupyter:jupyter_server:0.1.1
Jupyter » Jupyter Server » Version: 0.2.0

cpe:2.3:a:jupyter:jupyter_server:0.2.0
Jupyter » Jupyter Server » Version: 0.2.1

cpe:2.3:a:jupyter:jupyter_server:0.2.1
Jupyter » Jupyter Server » Version: 0.3.0

cpe:2.3:a:jupyter:jupyter_server:0.3.0
Jupyter » Jupyter Server » Version: 1.0.0

cpe:2.3:a:jupyter:jupyter_server:1.0.0
Jupyter » Jupyter Server » Version: 1.0.1

cpe:2.3:a:jupyter:jupyter_server:1.0.1
Jupyter » Jupyter Server » Version: 1.0.2

cpe:2.3:a:jupyter:jupyter_server:1.0.2
Jupyter » Jupyter Server » Version: 1.0.3

cpe:2.3:a:jupyter:jupyter_server:1.0.3
Jupyter » Jupyter Server » Version: 1.0.4

cpe:2.3:a:jupyter:jupyter_server:1.0.4
Jupyter » Jupyter Server » Version: 1.0.5

cpe:2.3:a:jupyter:jupyter_server:1.0.5
Jupyter » Jupyter Server » Version: 1.0.6

cpe:2.3:a:jupyter:jupyter_server:1.0.6
Jupyter » Jupyter Server » Version: 1.0.7

cpe:2.3:a:jupyter:jupyter_server:1.0.7
Jupyter » Jupyter Server » Version: 1.1.1

cpe:2.3:a:jupyter:jupyter_server:1.1.1
Jupyter » Jupyter Server » Version: 1.17.0

cpe:2.3:a:jupyter:jupyter_server:1.17.0
Jupyter » Jupyter Server » Version: 1.17.1

cpe:2.3:a:jupyter:jupyter_server:1.17.1
Jupyter » Jupyter Server » Version: 1.18.0

cpe:2.3:a:jupyter:jupyter_server:1.18.0
Jupyter » Jupyter Server » Version: 1.18.1

cpe:2.3:a:jupyter:jupyter_server:1.18.1
Jupyter » Jupyter Server » Version: 1.19.1

cpe:2.3:a:jupyter:jupyter_server:1.19.1
Jupyter » Jupyter Server » Version: 1.21.0

cpe:2.3:a:jupyter:jupyter_server:1.21.0
Jupyter » Jupyter Server » Version: 1.23.0

cpe:2.3:a:jupyter:jupyter_server:1.23.0
Jupyter » Jupyter Server » Version: 1.23.1

cpe:2.3:a:jupyter:jupyter_server:1.23.1
Jupyter » Jupyter Server » Version: 1.23.2

cpe:2.3:a:jupyter:jupyter_server:1.23.2
Jupyter » Jupyter Server » Version: 1.23.3

cpe:2.3:a:jupyter:jupyter_server:1.23.3
Jupyter » Jupyter Server » Version: 1.23.4

cpe:2.3:a:jupyter:jupyter_server:1.23.4
Jupyter » Jupyter Server » Version: 1.23.5

cpe:2.3:a:jupyter:jupyter_server:1.23.5
Jupyter » Jupyter Server » Version: 1.23.6

cpe:2.3:a:jupyter:jupyter_server:1.23.6
Jupyter » Jupyter Server » Version: 1.24.0

cpe:2.3:a:jupyter:jupyter_server:1.24.0
Jupyter » Jupyter Server » Version: 2.0.0

cpe:2.3:a:jupyter:jupyter_server:2.0.0
Jupyter » Jupyter Server » Version: 2.0.1

cpe:2.3:a:jupyter:jupyter_server:2.0.1
Jupyter » Jupyter Server » Version: 2.0.2

cpe:2.3:a:jupyter:jupyter_server:2.0.2
Jupyter » Jupyter Server » Version: 2.0.3

cpe:2.3:a:jupyter:jupyter_server:2.0.3
Jupyter » Jupyter Server » Version: 2.0.4

cpe:2.3:a:jupyter:jupyter_server:2.0.4
Jupyter » Jupyter Server » Version: 2.0.5

cpe:2.3:a:jupyter:jupyter_server:2.0.5
Jupyter » Jupyter Server » Version: 2.0.6

cpe:2.3:a:jupyter:jupyter_server:2.0.6
Jupyter » Jupyter Server » Version: 2.0.7

cpe:2.3:a:jupyter:jupyter_server:2.0.7
Jupyter » Jupyter Server » Version: 2.1.0

cpe:2.3:a:jupyter:jupyter_server:2.1.0
Jupyter » Jupyter Server » Version: 2.2.0

cpe:2.3:a:jupyter:jupyter_server:2.2.0
Jupyter » Jupyter Server » Version: 2.2.1

cpe:2.3:a:jupyter:jupyter_server:2.2.1
Jupyter » Jupyter Server » Version: 2.3.0

cpe:2.3:a:jupyter:jupyter_server:2.3.0
Jupyter » Jupyter Server » Version: 2.4.0

cpe:2.3:a:jupyter:jupyter_server:2.4.0
Jupyter » Jupyter Server » Version: 2.5.0

cpe:2.3:a:jupyter:jupyter_server:2.5.0
Jupyter » Jupyter Server » Version: 2.6.0

cpe:2.3:a:jupyter:jupyter_server:2.6.0
Jupyter » Jupyter Server » Version: 2.7.0

cpe:2.3:a:jupyter:jupyter_server:2.7.0
Jupyter » Jupyter Server » Version: 2.7.1

cpe:2.3:a:jupyter:jupyter_server:2.7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-40170

Products

Pricing

Contact Us