References https://www.cnblogs.com/gloves7/p/17837097.html https://github.com/vulhub/vulhub/blob/master/jumpserver/CVE-2023-42820/README.zh-cn.md https://cloud.tencent.com/developer/article/2357891 https://t0ngmystic.com/sec/cve-2023-42820-jumpserver%E4%BC%AA%E9%9A%8F%E6%9C%BA%E6%95%B0%E5%AF%BC%E8%87%B4%E4%BB%BB%E6%84%8F%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE/ https://www.leavesongs.com/PENETRATION/jumpserver-sep-2023-multiple-vulnerabilities-go-through.html https://www.ch35tnut.com/zh-cn/vulnerability/cve-2023-42820-jumpserver-pwd-reset-vuln/ https://www.cnblogs.com/zpchcbd/p/17747778.html https://blog.csdn.net/2201_75756681/article/details/135239530 https://rivers.chaitin.cn/blog/cq950u10lnechd244gig https://www.ddpoc.com/DVB-2023-5185.html https://rce.moe/2023/10/03/jumpserver-CVE-2023-42820/ https://nvd.nist.gov/vuln/detail/cve-2023-42820 https://github.com/jumpserver/jumpserver/security/advisories/GHSA-7prv-g565-82qp https://github.com/vulhub/vulhub/blob/master/jumpserver/CVE-2023-42820/poc.py
Related VulnerabilitiesPoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header(CVE-2025-62712) JumpServer ConnectionToken 权限验证不当漏洞飞致云 JumpServer 访问控制不当漏洞PoCCVE-2023-42442: JumpServer > 3.6.4 - Information DisclosurePoCCVE-2024-24763: JumpServer < 3.10.0 - Open RedirectPoCCVE-2023-42442: JumpServer 未授权访问PoCjumpserver-unauth-rce: Jumpserver Unauth RCE飞致云 JumpServer 需授权 任意文件读取漏洞JumpServer 需授权 文件写入漏洞JumpServer CVE-2024-29201 远程代码执行漏洞JumpServer 远程代码执行漏洞