Skip to content
Threat Feed

Tag

Origin-Validation

1 brief RSS
high advisory

Jupyter Server CORS Origin Validation Bypass via Regex

Jupyter Server versions 2.17.0 and earlier are vulnerable to a CORS origin validation bypass due to improper use of `re.match()` in validating the Origin header against the `allow_origin_pat` configuration, allowing attackers to bypass CORS restrictions.

jupyter-server cors origin-validation regex web-application
2r 1t