Open Redirect Vulnerability in Jupyter Notebook and JupyterHub

CVE-2019-10255

What is CVE-2019-10255?

An Open Redirect vulnerability exists in Jupyter Notebook prior to version 5.7.7 and in JupyterHub prior to version 0.9.5. This vulnerability allows an attacker to craft specific links that, when accessed, can redirect users to a malicious website after they log in. This poses a significant security risk as it can lead to unauthorized access and potential data exposure, especially for users interacting with these applications through their browsers. Notably, installations using a base_url prefix are not affected by this issue.

References