Filter
JumpserverArbitrary File Read in Ansible Playbooks in Jumpserver
10
First published (updated )
JumpserverArbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
10
First published (updated )
JumpserverJumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery
10
EPSS
0.04%
First published (updated )
JumpserverJumpServer's insecure Ansible playbook validation leads to RCE in Celery
10
EPSS
0.04%
First published (updated )
JumpserverJumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked
5.3
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
JumpserverJumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality
5.3
EPSS
0.04%
First published (updated )
JumpserverJumpServer Open Redirect Vulnerability
6.1
EPSS
0.06%
First published (updated )
JumpserverInsecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute a…
9.8
First published (updated )
JumpserverJumpServer default admin user email leak password reset
5.3
First published (updated )
Jumpserverjumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
JumpserverSSH public key login without private key challenge if mfa is enabled in jumpserver
9.8
First published (updated )
go/github.com/jumpserver/kokoRemote code execution on the host system via MongoDB shell in jumpserver
9.9
First published (updated )
JumpserverNon-MFA account takeover via brute-force attack on weak password reset code in jumpserver
8.2
First published (updated )
JumpserverNon-MFA account takeover via using only SSH public key to login in jumpserver
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
JumpserverJumpServer session replays download without authentication
8.2
First published (updated )
JumpserverAn issue in Jumpserver 2.6.2 and below allows attackers to create a connection token through an API …
10
First published (updated )