References https://www.cnblogs.com/fuchangjiang/p/17713181.html https://blog.nsfocus.net/jumpservercve-2023-42442/ https://www.secrss.com/articles/58981 https://isecurity.huawei.com/sec/web/viewAlert.do?id=2469 https://www.huaweicloud.com/notice/2022/20230919174754200.html https://cloud.tencent.com/developer/article/2334391 https://github.com/jumpserver/jumpserver/security/advisories/GHSA-633x-3f4f-v9rw https://github.com/tarihub/blackjump https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42442.yaml https://github.com/C1ph3rX13/CVE-2023-42442 https://blog.csdn.net/WangsuSecurity/article/details/135847589
Related VulnerabilitiesPoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header(CVE-2025-62712) JumpServer ConnectionToken 权限验证不当漏洞飞致云 JumpServer 访问控制不当漏洞PoCCVE-2023-42442: JumpServer > 3.6.4 - Information DisclosurePoCCVE-2024-24763: JumpServer < 3.10.0 - Open RedirectPoCCVE-2023-42442: JumpServer 未授权访问PoCjumpserver-unauth-rce: Jumpserver Unauth RCE飞致云 JumpServer 需授权 任意文件读取漏洞JumpServer 需授权 文件写入漏洞JumpServer CVE-2024-29201 远程代码执行漏洞JumpServer 远程代码执行漏洞