Description
JumpServer存在远程代码执行漏洞，此漏洞是程序对用户上传的工作模板数据缺乏足够的校验导致的。
JumpServer CVE-2024-29201 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/JumpServer-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2024-29201&CVE-2024-29202.md
https://avd.aliyun.com/detail?id=AVD-2024-29201
https://www.cve.org/CVERecord?id=CVE-2024-29201
https://nvd.nist.gov/vuln/detail/cve-2024-29201
https://www.secrss.com/articles/64901
https://www.bilibili.com/video/BV1jhvre4EcJ/
https://blog.csdn.net/qq_43355651/article/details/137275412
https://cloud.tencent.com/developer/article/2407863
https://wh0am1i.com/index.html
https://www.sentinelone.com/vulnerability-database/cve-2024-29201/
https://zhuanlan.zhihu.com/p/690312025