Description
JumpServer CoreAPI存在身份认证绕过漏洞，此漏洞是由于tokens接口对用户的请求验证不当造成的。
JumpServer CoreAPI CVE-2023-43652 身份认证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-43652
https://github.com/jumpserver/jumpserver/security/advisories/GHSA-fr8h-xh5x-r8g9
https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-1-2
https://www.leavesongs.com/PENETRATION/jumpserver-sep-2023-multiple-vulnerabilities-go-through.html
https://app.opencve.io/cve/?product=jumpserver&vendor=fit2cloud
https://www.clouddefense.ai/cve/2023/CVE-2023-43652
https://www.jumpserver.com/security