CVE-2019-10255
Published Mar 28, 2019
Last updated a year ago
Overview
- Description
- An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 5.8
- Impact score
- 4.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-601
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jupyter:jupyterhub:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD187FC8-D1B3-44B8-92EB-9EDD35DA60D4",
"versionEndExcluding": "0.9.5"
},
{
"criteria": "cpe:2.3:a:jupyter:notebook:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "791BCAA5-DEE0-4ACC-A6B1-5CBE021E33C9",
"versionEndExcluding": "5.7.7"
}
],
"operator": "OR"
}
]
}
]