CVE-2020-26275

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyter server to redirect the browser to a different malicious website. All jupyter servers running without a base_url prefix are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may *appear* safe, but ultimately redirect to a spoofed server on the public internet. This same vulnerability was patched in upstream notebook v5.7.8. This is fixed in jupyter_server 1.1.1. If upgrade is not available, a workaround can be to run your server on a url prefix: "jupyter server --ServerApp.base_url=/jupyter/".

• CWE-601

• https://advisory.checkmarx.net/advisory/CX-2020-4291Exploit, Third Party Advisory
• https://github.com/jupyter-server/jupyter_server/commit/85e4abccf6ea9321d29153f73b0bd72ccb3a6bcaPatch, Third Party Advisory
• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-9f66-54xg-pc2cPatch, Third Party Advisory
• https://pypi.org/project/jupyter-server/Product
• https://advisory.checkmarx.net/advisory/CX-2020-4291Exploit, Third Party Advisory
• https://github.com/jupyter-server/jupyter_server/commit/85e4abccf6ea9321d29153f73b0bd72ccb3a6bcaPatch, Third Party Advisory
• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-9f66-54xg-pc2cPatch, Third Party Advisory
• https://pypi.org/project/jupyter-server/Product

Published

Dec 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2627Vulnerability in the MySQL Server product of Oracle MySQL (c…6.5
• CVE-2020-26270In affected versions of TensorFlow running an LSTM/GRU model…3.3
• CVE-2020-26271In affected versions of TensorFlow under certain cases, load…3.3
• CVE-2020-26272The Electron framework lets users write cross-platform deskt…6.5
• CVE-2020-26273osquery is a SQL powered operating system instrumentation, m…5.2
• CVE-2020-26274In systeminformation (npm package) before version 4.31.1 the…8.8
• CVE-2020-26276Fleet is an open source osquery manager. In Fleet before ver…9.8
• CVE-2020-26277DBdeployer is a tool that deploys MySQL database servers eas…6.1
• CVE-2020-26278Weave Net is open source software which creates a virtual ne…8
• CVE-2020-26279go-ipfs is an open-source golang implementation of IPFS whic…8.1
• CVE-2020-2628Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26280OpenSlides is a free, Web-based presentation and assembly sy…8.9