[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk6-3vn5x9qvrCICd4jOuaASmarwcARaFcT4nE4mwTok":3,"g5a-risk:CVE-2023-25574":114},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":64,"weaknesses":65,"weaknessesCount":49,"isActivelyExploited":74,"cisaInfo":29,"otxData":29,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":109,"notableEvents":110},"CVE-2023-25574","What is CVE-2023-25574?","`jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI). LTI13Authenticator that was introduced in `jupyterhub-ltiauthenticator` 1.3.0 wasn't validating JWT signatures. This is believed to allow the LTI13Authenticator to authorize a forged request. Only users that has configured a JupyterHub installation to use the authenticator class `LTI13Authenticator` are affected. `jupyterhub-ltiauthenticator` version 1.4.0 removes LTI13Authenticator to address the issue. No known workarounds are available.","`jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI). LTI13Authenticator that was introduced in `jupyterhub-...","2025-02-25T15:15:16.227","2025-09-02T21:36:09.113",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","NONE","CHANGED","HIGH",10,"CRITICAL",null,3.9,6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"UNCHANGED",5.9,[],[],0.00358,[40,40,40,40,40,40,40],"Critical",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"jupyter","lti_jupyterhub_authenticator","1.3.0","cpe:2.3:a:jupyter:lti_jupyterhub_authenticator:1.3.0:*:*:*:*:*:*:*",1,[51,56,60],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002Fjupyterhub\u002Fltiauthenticator\u002Fblob\u002F3feec2e81b9d3b0ad6b58ab4226af640833039f3\u002Fltiauthenticator\u002Flti13\u002Fvalidator.py#L122-L164","GitHub",[55],"Product",{"url":57,"source":53,"tags":58},"https:\u002F\u002Fgithub.com\u002Fjupyterhub\u002Fltiauthenticator\u002Fblob\u002Fmain\u002FCHANGELOG.md#140---2023-03-01",[59],"Release Notes",{"url":61,"source":53,"tags":62},"https:\u002F\u002Fgithub.com\u002Fjupyterhub\u002Fltiauthenticator\u002Fsecurity\u002Fadvisories\u002FGHSA-mcgx-2gcr-p3hp",[63],"Vendor Advisory",3,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2023-25574? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-25574, a critical severity cyber security vulnerability from 2025. `jupyterhub-ltiauthenticator` is a JupyterHub authentic...","CVE-2023-25574, CVE-2023-25574 vulnerability, CVE-2023-25574 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, jupyter security, lti_jupyterhub_authenticator vulnerability","\u002Fwhat-is\u002Fcve-2023-25574",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-25574","Cybersecurity","CVE-2023-25574, CVE-2023-25574 vulnerability, CVE-2023-25574 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":29,"Negate":29,"Nodes":103},[104],{"Operator":105,"Negate":74,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":108,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"972A882C-4130-4E8C-9B39-B83A2AF78F24",[],[],{"lastModified":11,"cacheTime":112,"version":113},1792276949955,"2.0",{"score":115,"band":116,"action":117,"scoredAt":118},54,"Medium","Plan remediation","2026-10-16T07:05:59.775918+00:00"]