![]() ![]() As of version 28.0.0 OAuth codes are invalidated after 10 minutes and will no longer be authenticated. When an attacker would get access to an authorization code they could authenticate at any time using the code. In affected versions OAuth codes did not expire. Nextcloud server is a self hosted personal cloud system. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |