Skip to content
OpenAdvisories

Package · Go

github.com/jumpserver/koko

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2023-43651

    Remote code execution on the host system via MongoDB shell in jumpserver

    JumpServer is an open source bastion host. An authenticated user can exploit a vulnerability in MongoDB sessions to execute arbitrary commands, leading to remote code execution. This vulnerability may further be leveraged to gain root privileges on the system…

    jumpserver jumpserver github.com/jumpserver/koko Go