CVE-2024-28188

CVSS V2 None CVSS V3 None

Description

Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of `jupyter-scheduler` users maybe be exposed, potentially revealing information about projects that a specific user may be working on. This vulnerability has been patched in version(s) 1.1.6, 1.2.1, 1.8.2 and 2.5.2.

Overview

CVE ID
CVE-2024-28188

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-05-23T11:54:53.672Z

Last Modified Date
2024-06-04T18:03:51.931Z

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html
CWE-287	http://cwe.mitre.org/data/definitions/287.html

References

Reference URL	Reference Tags
https://github.com/jupyter-server/jupyter-scheduler/security/advisories/GHSA-v9g2-g7j4-4jxc	x_refsource_CONFIRM
https://github.com/jupyter-server/jupyter_server/pull/1392	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-28188
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28188

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 08:08:32				Added to TrackCVE