[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJ5t-wBWY4V-VeMa6732sBLTeOhDwemOPfG2HEEz3_Nk":3,"g5a-risk:CVE-2025-61669":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":29,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":52,"references":53,"referencesCount":62,"weaknesses":63,"weaknessesCount":52,"isActivelyExploited":72,"cisaInfo":29,"otxData":29,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2025-61669","What is CVE-2025-61669?","Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redirect_safe()`, which allows redirects to arbitrary external domains via values such as `\u002F\u002F\u002Fexample.com`. An attacker can use a crafted login URL to redirect users to a malicious site and facilitate phishing attacks. This issue is fixed in version 2.18.0.","Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insuffic...","2026-05-05T16:16:10.133","2026-10-07T09:10:00.16",6.3,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","NETWORK","LOW","NONE","REQUIRED","CHANGED",6.1,"MEDIUM",null,2.8,2.7,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"security-advisories@github.com","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":40,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":24,"VulnAvailabilityImpact":24,"SubConfidentialityImpact":41,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":42,"ConfidentialityRequirement":42,"IntegrityRequirement":42,"AvailabilityRequirement":42,"ModifiedAttackVector":42,"ModifiedAttackComplexity":42,"ModifiedAttackRequirements":42,"ModifiedPrivilegesRequired":42,"ModifiedUserInteraction":42,"ModifiedVulnConfidentialityImpact":42,"ModifiedVulnIntegrityImpact":42,"ModifiedVulnAvailabilityImpact":42,"ModifiedSubConfidentialityImpact":42,"ModifiedSubIntegrityImpact":42,"ModifiedSubAvailabilityImpact":42,"Safety":42,"Automatable":42,"Recovery":42,"ValueDensity":42,"VulnerabilityResponseEffort":42,"ProviderUrgency":42},"4.0","PASSIVE","HIGH","NOT_DEFINED",0.00244,[43,43,43,43,43,43,43],"Medium",[47],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"jupyter","jupyter_server","*","cpe:2.3:a:jupyter:jupyter_server:*:*:*:*:*:*:*:*",1,[54,60],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fgithub.com\u002Fjupyter-server\u002Fjupyter_server\u002Fsecurity\u002Fadvisories\u002FGHSA-qh7q-6qm3-653w","GitHub",[58,59],"Exploit","Vendor Advisory",{"url":55,"source":56,"tags":61},[58,59],2,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-601","URL Redirection to Untrusted Site ('Open Redirect')","A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.","An http parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials. Because the server name in the modified link is identical to the original site, phishing attempts have a more trustworthy appearance. Whether this issue poses a vulnerability will be subject to the intended behavior of the application. For example, a search engine might intentionally provide redirects to arbitrary URLs.","Draft","Base","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2025-61669? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-61669, a medium severity cyber security vulnerability from 2026. Jupyter Server is the backend for Jupyter web application...","CVE-2025-61669, CVE-2025-61669 vulnerability, CVE-2025-61669 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, jupyter security, jupyter_server vulnerability","\u002Fwhat-is\u002Fcve-2025-61669",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-61669","Cybersecurity","CVE-2025-61669, CVE-2025-61669 vulnerability, CVE-2025-61669 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":29,"Negate":29,"Nodes":101},[102],{"Operator":103,"Negate":72,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":106,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":107,"VersionEndIncluding":29},"E0B6C703-7E28-4F23-9878-E157975C32A4","2.18.0",[],[110],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"4b1f9664-8bbd-4e40-bcfe-77c2f4a82eed","NEW_NVD","2026-05-05T18:24:40.467128+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":118,"version":119},1792276949909,"2.0",{"score":121,"band":122,"action":123,"scoredAt":124},23,"Low","Monitor","2026-10-16T07:13:15.270113+00:00"]