open-notebook vulnerabilities
1 known vulnerability in open-notebook from Lfnovo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest first
- 7.7 High severity
open-notebook: Server-Side Request Forgery
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network servi