References https://nvd.nist.gov/vuln/detail/cve-2023-42819 https://github.com/jumpserver/jumpserver/security/advisories/GHSA-ghg2-2whp-6m33 https://avd.aliyun.com/detail?id=AVD-2023-42819 https://www.secrss.com/articles/59284 https://blog.fit2cloud.com/?p=2f081e94-a30c-43af-8f5d-6d55e414d148 https://www.leavesongs.com/PENETRATION/jumpserver-sep-2023-multiple-vulnerabilities-go-through.html https://www.sentinelone.com/vulnerability-database/cve-2023-42819/ https://nvd.nist.gov/vuln/detail/cve-2023-42819
Related VulnerabilitiesPoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header(CVE-2025-62712) JumpServer ConnectionToken 权限验证不当漏洞飞致云 JumpServer 访问控制不当漏洞PoCCVE-2023-42442: JumpServer > 3.6.4 - Information DisclosurePoCCVE-2024-24763: JumpServer < 3.10.0 - Open RedirectPoCCVE-2023-42442: JumpServer 未授权访问PoCjumpserver-unauth-rce: Jumpserver Unauth RCE飞致云 JumpServer 需授权 任意文件读取漏洞JumpServer 需授权 文件写入漏洞JumpServer CVE-2024-29201 远程代码执行漏洞JumpServer 远程代码执行漏洞