Threats tagged 'bit-jupyterhub-2024-28233'

A cross-site scripting (XSS) vulnerability exists in JupyterHub versions prior to 4.1.0. By tricking a user into visiting a malicious subdomain, an attacker can execute script code in the context of the user's session. This vulnerability affects single-origin JupyterHub deployments and those with user-controlled applications on subdomains. Exploitation could grant full access to the JupyterHub API and the user's single-user server. The issue is fixed in version 4.1.0.