CVE-2020-15110

Katalog CVE

CVSS 8.1 · High EPSS 1,1%

Kerentanan Incorrect Authorization pada jupyterhub kubespawner. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12.

Rincian

Terbit di NVD

17 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jupyterhub/kubespawner/commit/3dfe870a7f5e98e2e398b01996ca6b8eff4bb1d0 patch · advisory pihak ketiga
• https://github.com/jupyterhub/kubespawner/security/advisories/GHSA-v7m9-9497-p9gr exploit · advisory pihak ketiga