CVE-2023-40170 cross-site inclusion (XSSI) of files in jupyter-server
Attackers can expose file contents or access files via untrusted links due to improper cross-site credential checks in Jupyter server.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2023-40170?
CVE-2023-40170 is a medium-severity vulnerability in jupyter-server jupyter_server, published on 28 Aug 2023. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs could allow exposure of certain file contents, or accessing files when opening untrusted files via "Open image in new tab". This issue has been addressed in commit `87a49272728` which has been included in release `2.7.2`. Users are advised to upgrade. Users unable to upgrade may use the lower performance `--ContentsManager.files_handler_class=jupyter_server.files.handlers.FilesHandler`, which implements the correct checks.
Which versions are affected by CVE-2023-40170?
3 open source packages ship an affected version, including jupyter-server. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
jupyter-server PyPI | All versions | 2.7.2 |
jupyter-server PyPI | All versions | 2.7.2 |
jupyter-server PyPI | All versions | 2.7.2 |
Products include Jupyter Jupyter Server.
How do I fix CVE-2023-40170?
Upgrade jupyter-server to 2.7.2 or later.
Is CVE-2023-40170 being exploited?
There is no known exploitation of CVE-2023-40170 in the wild and no public exploit code.
Other vulnerabilities in jupyter-server jupyter_server
- CVE-2026-44727 Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
- CVE-2026-35397 jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix
- CVE-2026-40110 jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
- CVE-2026-40934 jupyter-server authentication cookies remain valid after password reset due to static cookie secret
- CVE-2024-35178 Jupyter server on Windows discloses Windows user password hash
Sources
Also known as DEBIAN-CVE-2023-40170, GHSA-64x5-55rw-9974, PYSEC-2023-157, UBUNTU-CVE-2023-40170.