High severity · published Mar 23, 2022
CVE-2022-24757
The Jupyter Server provides the backend (i.e
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter Server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter Server version 1.15.4 contains a patch for this issue. There are currently no known workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Jupyter Server · Jupyter
before 1.15.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-24757
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-24757
Patch
https://github.com/jupyter-server/jupyter_server/commit/a5683aca0b0e412672ac6218d09f74d44ca0de5a
Third Party Advisory
https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-p737-p57g-4cpr
More from Jupyter Server
8.8
CVE-2026-6657
CORS Origin Validation Bypass in jupyter-server
8.8
CVE-2026-35397
jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix
8.8
CVE-2022-29241
Jupyter Server provides the backend (i.e
8.1
CVE-2026-5422
Path Traversal in jupyter/jupyter
7.5
CVE-2024-35178
The Jupyter Server provides the backend for Jupyter web applications