Skip to content
OpenAdvisories

Vendor

jumpserver

27 known vulnerabilities.

Products

jumpserver 27
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2025-62795

    JumpServer Unauthorized LDAP Configuration Access via WebSocket

    JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted…

    jumpserver jumpserver
  • High 8.6
    CVE-2023-43651

    Remote code execution on the host system via MongoDB shell in jumpserver

    JumpServer is an open source bastion host. An authenticated user can exploit a vulnerability in MongoDB sessions to execute arbitrary commands, leading to remote code execution. This vulnerability may further be leveraged to gain root privileges on the system…

    jumpserver jumpserver github.com/jumpserver/koko Go
  • High 8.2
    CVE-2023-43650

    Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver

    JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-force attacks due to the absence of rate limiting. JumpServer provides a feature allowing users to reset forgotten passwords. Affected users …

    jumpserver jumpserver
  • High 8.2
    CVE-2023-43652

    Non-MFA account takeover via using only SSH public key to login in jumpserver

    JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API with a username and an SSH public key without needing a password or the corresponding SSH private key. An SSH public key should be considered…

    jumpserver jumpserver
  • High 8.9
    CVE-2023-42819 Public exploit

    Path traversal in Jumpserver

    JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the 'Job-Template' menu and create a playbook named 'test'. Get the playbook id from the detail page, like 'e0adabef-c38f-4…

    jumpserver jumpserver
  • High 7.0
    CVE-2023-42820 Public exploit

    Random seed leakage in Jumpserver

    JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated verification codes to be replayed, which could lead to password resets. If MFA is enabled users are…

    jumpserver jumpserver
  • High 8.2
    CVE-2023-42442 Public exploit EPSS 63%

    JumpServer session replays download without authentication

    JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, O…

    jumpserver jumpserver