medium
AI Hub Jupyter Notebook instance CSRF
Published Sat, Oct 17th, 2020
Platforms
Summary
AI Hub Jupyter Notebook server lacked a check of the Origin header that led to a CSRF vulnerability. An attacker could have read sensitive data and execute arbitrary actions in customer environments.
Affected Services
AI Hub Jupyter Notebook
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/ds0440
Entry Status
Finalized
Disclosure Date
Tue, Mar 10th, 2020
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None
Piercing Index Rating
-
Discovered by
s1r1us
