CVE-2020-26215

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.4 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
GitHub_MCNA
4.4 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
jupyternotebook
𝑥
< 6.1.5
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
jupyter-notebook
bullseye
6.2.0-1
fixed
buster
no-dsa
bookworm
6.4.12-2.2
fixed
sid
6.4.13-2
fixed
trixie
6.4.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jupyter-notebook
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
ignored
focal
Fixed 6.0.3-2ubuntu0.1
released
bionic
Fixed 5.2.2-1ubuntu0.1
released
xenial
dne
trusty
dne