Filter
AND
Fit2cloud JumpserverArbitrary File Read in Ansible Playbooks in Jumpserver
10
First published (updated )
Fit2cloud JumpserverArbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
10
First published (updated )
Fit2cloud JumpserverJumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery
10
EPSS
0.04%
First published (updated )
Fit2cloud JumpserverJumpServer's insecure Ansible playbook validation leads to RCE in Celery
10
EPSS
0.04%
First published (updated )
Fit2cloud JumpserverJumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked
5.3
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fit2cloud JumpserverJumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality
5.3
EPSS
0.04%
First published (updated )
Fit2cloud JumpserverJumpServer Open Redirect Vulnerability
6.1
EPSS
0.06%
First published (updated )
Fit2cloud JumpserverInsecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute a…
9.8
First published (updated )
CVE-2023-46138JumpServer default admin user email leak password reset
5.3
First published (updated )
CVE-2023-46123jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fit2cloud JumpserverSSH public key login without private key challenge if mfa is enabled in jumpserver
9.8
First published (updated )
Fit2cloud JumpserverRemote code execution on the host system via MongoDB shell in jumpserver
9.9
First published (updated )
Fit2cloud JumpserverNon-MFA account takeover via brute-force attack on weak password reset code in jumpserver
8.2
First published (updated )
Fit2cloud JumpserverNon-MFA account takeover via using only SSH public key to login in jumpserver
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fit2cloud JumpserverRandom seed leakage in Jumpserver
8.2
First published (updated )
Fit2cloud JumpserverJumpServer session replays download without authentication
8.2
First published (updated )