Description
JumpServer存在远程代码执行漏洞，此漏洞是程序对用户上传的工作模板数据缺乏足够的校验导致的。
JumpServer CVE-2024-29202 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2024-29202
https://www.secrss.com/articles/64901
https://cloud.tencent.com/developer/article/2407863
https://nsfocusglobal.com/jumpserver-remote-code-execution-vulnerability-cve-2024-29201-cve-2024-29202-notice/
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/JumpServer-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2024-29201&CVE-2024-29202.md
https://nvd.nist.gov/vuln/detail/cve-2024-29202
https://www.sentinelone.com/vulnerability-database/cve-2024-29202/
https://www.cve.org/CVERecord?id=CVE-2024-29202
https://app.opencve.io/cve/?product=jumpserver&vendor=fit2cloud
https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-2-2