Approved changes feed: RSS · Atom

cpe:2.3:a:jupyter:jupyter_server:0.0.1:*:*:*:*:*:*:*

part: a version: 0.0.1 update: *

VendorJupyter (3170fc95-7dab-5fb9-942d-251eb444755d)
ProductJupyter Server (f7ac9e89-5e45-5860-af9d-c5afb888630c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jupyter-server/jupyter_server purl2cpe 2026-06-01 10:17:17.291974
pkg:pypi/jupyter-server purl2cpe 2026-06-01 10:17:17.291975

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35178 vulnerable 2026-06-03 14:55:55.637335 Jupyter server on Windows discloses Windows user password hash
HIGH (7.5)
The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Or an attacker perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines. This vulnerability is fixed in 2.14.1.
Published: 2024-06-06T15:37:10.348Z
Updated: 2024-08-02T03:07:46.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.