Information disclosure in Jupyter Jupyter_server
CVE-2023-49080
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user includ…
EPSS: 0.008 (53.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Jupyter Jupyter_server
- Jupyter-server Jupyter_server — versions < 2.11.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com
- security-advisories@github.com
Frequently asked questions
- What is CVE-2023-49080?
- CVE-2023-49080 is a low-severity vulnerability in Jupyter Jupyter_server, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 3.5/10. Published 2023-12-04.
- How severe is CVE-2023-49080?
- Low severity. CVSS v3 base score is 3.5 out of 10.