PT-2019-11663 · Google+4 · Google Chrome+5

CVE-2019-10255 · Publicado 2019-03-28 · Atualizado 2026-07-09

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Jupyter Notebook versions prior to 5.7.7 JupyterHub versions prior to 0.9.5

Description: The issue allows crafted links to the login page to redirect to a malicious site after successful login. This affects all browsers in Jupyter Notebook and some browsers, such as Chrome and Firefox, in JupyterHub. Servers running on a base url prefix are not affected.

Recommendations: For Jupyter Notebook versions prior to 5.7.7, update to version 5.7.7 or later. For JupyterHub versions prior to 0.9.5, update to version 0.9.5 or later.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2019-10255

GHSA-RV62-4PMJ-XW6H

MGASA-2022-0323

OPENSUSE-SU-2024:11242-1

PYSEC-2026-2683

PYSEC-2026-647

USN-5585-1

Produtos afetados

Google Chrome

Firefox

Jupyter Notebook

Jupyterhub

Linuxmint

Ubuntu

Referências · 40

• https://github.com/jupyter/notebook/commit/d65328d4841892b412aef9015165db1eb029a8ed · Correção
• https://github.com/jupyter/notebook/commit/08c4c898182edbe97aadef1815cce50448f975cb · Correção
• https://github.com/jupyter/notebook · Nota
• https://github.com/jupyter/notebook/compare/05aa4b2...16cf97c · Correção
• https://github.com/jupyter/notebook/commit/70fe9f0ddb3023162ece21fbb77d5564306b913b · Correção
• https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55 · Nota
• https://github.com/jupyter/notebook/security/advisories/GHSA-v7vq-3x77-87vg · Nota
• https://github.com/jupyter/notebook/commit/979e0bd15e794ceb00cc63737fcd5fd9addc4a99 · Nota
• https://osv.dev/vulnerability/CVE-2019-10255 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UP5RLEES2JBBNSNLBR65XM6PCD4EMF7D · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10255 · Nota de Segurança
• https://github.com/advisories/GHSA-rv62-4pmj-xw6h · Nota
• https://bugs.mageia.org/show_bug.cgi?id=30789 · Nota
• https://osv.dev/vulnerability/PYSEC-2026-647 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2022-0323 · Aviso do Fabricante