vulnerability

Ubuntu: USN-6153-1 (CVE-2022-39286): Jupyter Core vulnerability

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Oct 26, 2022
Added
Jun 12, 2023
Modified
Jan 28, 2025

Description

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.

Solution(s)

ubuntu-pro-upgrade-python-jupyter-coreubuntu-pro-upgrade-python3-jupyter-core
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.