References https://nvd.nist.gov/vuln/detail/cve-2023-42442 https://github.com/jumpserver/jumpserver/security/advisories/GHSA-633x-3f4f-v9rw https://www.rainforest.tech/cves/CVE-2023-42442.html https://pentest-tools.com/vulnerabilities-exploits/jumpserver-364-information-disclosure_3208 https://medium.com/@ekmgoorloutz26085/cve-2023-42442-jumpserver-session-replay-leak-could-expose-sensitive-ops-data-87b7d2b8734c https://github.com/C1ph3rX13/CVE-2023-42442 https://t0ngmystic.com/sec/cve-2023-42442-jumpserver%E8%BA%AB%E4%BB%BD%E7%BB%95%E8%BF%87/ https://securityonline.info/cve-2023-42442-jumpserver-session-replay-download-bug-without-authentication/ https://www.leavesongs.com/PENETRATION/jumpserver-sep-2023-multiple-vulnerabilities-go-through.html https://blog.nsfocus.net/jumpservercve-2023-42442/ https://www.cnblogs.com/fuchangjiang/p/17713181.html https://www.secrss.com/articles/58981 https://isecurity.huawei.com/sec/web/viewAlert.do?id=2469 https://www.huaweicloud.com/notice/2022/20230919174754200.html https://cloud.tencent.com/developer/article/2334391 https://blog.csdn.net/WangsuSecurity/article/details/135847589
Related VulnerabilitiesPoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header(CVE-2025-62712) JumpServer ConnectionToken 权限验证不当漏洞飞致云 JumpServer 访问控制不当漏洞PoCCVE-2023-42442: JumpServer > 3.6.4 - Information DisclosurePoCCVE-2024-24763: JumpServer < 3.10.0 - Open RedirectPoCCVE-2023-42442: JumpServer 未授权访问PoCjumpserver-unauth-rce: Jumpserver Unauth RCE飞致云 JumpServer 需授权 任意文件读取漏洞JumpServer 需授权 文件写入漏洞JumpServer CVE-2024-29201 远程代码执行漏洞JumpServer 远程代码执行漏洞