PT-2020-16397 · Jupyter · Jupyter Server

Yaniv Nizry · Published 2020-12-21 · Updated 2022-08-06 · CVE-2020-26275

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jupyter Server versions prior to 1.1.1

Description The issue is an open redirect vulnerability that could cause the Jupyter server to redirect the browser to a different malicious website. All Jupyter servers running without a base url prefix are technically affected. However, these maliciously crafted links can only be reasonably made for known Jupyter server hosts. A link to a Jupyter server may appear safe but ultimately redirect to a spoofed server on the public internet.

Recommendations For versions prior to 1.1.1, upgrade to version 1.1.1 to resolve the issue. As a temporary workaround, consider running the server on a URL prefix by using the command jupyter server --ServerApp.base url=/jupyter/.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-26275

GHSA-9F66-54XG-PC2C

PYSEC-2020-346

PYSEC-2020-50

Affected Products

Jupyter Server

References · 18

• 🔥 https://advisory.checkmarx.net/advisory/CX-2020-4291 · Exploit
• https://github.com/jupyter-server/jupyter_server/commit/85e4abccf6ea9321d29153f73b0bd72ccb3a6bca · Patch
• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-9f66-54xg-pc2c · Patch
• https://ubuntu.com/security/CVE-2020-26275 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-50 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26275 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26275 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-346 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-26275 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-26275 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-26275 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-26275 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9f66-54xg-pc2c · Vendor Advisory
• https://github.com/jupyter-server/jupyter_server · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2020-346.yaml · Note