Information Disclosure

2024-01-2205:58:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

jupyterlab

url validation

vulnerability

malicious url

sensitive information

authorization

xsrf tokens

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.1%

JSON

jupyterlab is vulnerable to Information Disclosure. The vulnerability is due to a lack of URL validation or sanitization, which could potentially allow an attacker to craft a malicious URL that exposes sensitive information such as Authorization and XSRF tokens when the link is clicked on.