CVE-2020-15110 — Possible pod name collisions in jupyterhub-kubespawner
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have…
Published: 2020-07-17 · CVSS: 6.8 · CVSS 3.1
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7