AI PRP: Jupyter Lab Exposed Ui RCE

[JamesFoxxx]

it would be awesome if you let me start working on finding a way to discover Jupyter Lab exposed UIs (not Jupyter Notebook which is a classic product), I like to find a way to trigger an OOB at the first step.

[maoning]

Hi @JamesFoxxx ,

Thanks for your request! This vulnerability is in scope for the reward program. Please complete the following items:

• Provide detailed vuln research.
• Submit the vulnerable & secure configurations of the target application to google/security-testbeds.
• Submit our participation form and you can start working on the development.

Please keep in mind that the Tsunami Scanner Team will only be able to work at one issue at a time for each participant so please hold on the implementation work for any other requests you might have.

Thanks!