CVE-2023-51277

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 5, 2024
Updated: Jan 11, 2024

Summary

CVE-2023-51277 is a vulnerability affecting the nbviewer-app, also known as Jupyter Notebook Viewer, prior to version 0.1.6. The issue grants the get-task-allow entitlement to release builds of the application, potentially allowing unauthorized access or execution of tasks. This vulnerability could pose a significant risk to organizations using the nbviewer-app for data analysis or collaboration, as it enables attackers to bypass intended access controls. It is recommended that users upgrade to the latest version of the software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share