CVE-2024-29033

OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's own Authenticators with any OAuth 2.0 provider. `GoogleOAuthenticator.hosted_domain` is used to restrict what Google accounts can be authorized access to a JupyterHub. The restriction is intented to be to Google accounts part of one or more Google organization verified to control specified domain(s). Prior to version 16.3.0, the actual restriction has been to Google accounts with emails ending with the domain. Such accounts could have been created by anyone which at one time was able to read an email associated with the domain. This was described by Dylan Ayrey (@dxa4481) in this [blog post] from 15th December 2023). OAuthenticator 16.3.0 contains a patch for this issue. As a workaround, restrict who can login another way, such as `allowed_users` or `allowed_google_groups`.

• CWE-285

• https://github.com/jupyterhub/oauthenticator/commit/5246b09675501b09fb6ed64022099b7644812f60Patch
• https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-55m3-44xf-hg4hVendor Advisory
• https://trufflesecurity.com/blog/google-oauth-is-broken-sort-ofPress/Media Coverage, Technical Description, Third Party Advisory
• https://github.com/jupyterhub/oauthenticator/commit/5246b09675501b09fb6ed64022099b7644812f60Patch
• https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-55m3-44xf-hg4hVendor Advisory
• https://trufflesecurity.com/blog/google-oauth-is-broken-sort-ofPress/Media Coverage, Technical Description, Third Party Advisory

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29028memos is a privacy-first, lightweight note-taking service. I…5.3
• CVE-2024-29029memos is a privacy-first, lightweight note-taking service. I…6.1
• CVE-2024-2903A vulnerability was found in Tenda AC7 15.03.06.44. It has b…8.8
• CVE-2024-29030memos is a privacy-first, lightweight note-taking service. I…5.3
• CVE-2024-29031Meshery is an open source, cloud native manager that enables…7.5
• CVE-2024-29032Qiskit IBM Runtime is an environment that streamlines quantu…7.8
• CVE-2024-29034CarrierWave is a solution for file uploads for Rails, Sinatr…6.1
• CVE-2024-29035Umbraco is an ASP.NET CMS. Failing webhooks logs are availab…5.3
• CVE-2024-29036Saleor Storefront is software for building e-commerce experi…6.5
• CVE-2024-29037datahub-helm provides the Kubernetes Helm charts for deployi…9.1
• CVE-2024-29038tpm2-tools is the source repository for the Trusted Platform…3.3
• CVE-2024-29039tpm2 is the source repository for the Trusted Platform Modul…8.1