FIT2CLOUD JumpServer

Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver

Arbitrary File Read in Ansible Playbooks in Jumpserver

JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery

JumpServer's insecure Ansible playbook validation leads to RCE in Celery

Remote code execution on the host system via MongoDB shell in jumpserver

JumpServer Koko vulnerable to Command Injection for Kubernetes Connection

Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function. NOTE: this is disputed because command filtering is not intended to restrict what code can be run by authorized users who are allowed to execute files.

SSH public key login without private key challenge if mfa is enabled in jumpserver

JumpServer Connection Token Leak Vulnerability

Non-MFA account takeover via using only SSH public key to login in jumpserver

Path traversal in Jumpserver

JumpServer session replays download without authentication

Random seed leakage in Jumpserver

Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver

JumpServer Unauthorized LDAP Configuration Access via WebSocket

JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering

JumpServer Open Redirect Vulnerability

JumpServer has an Open Redirect Vulnerability

jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values

JumpServer default admin user email leak password reset

JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked

JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality

JumpServer Improper Certificate Validation in Custom SMS API Client

JumpServer has a Kubernetes Token Leak Vulnerability