Exploit for Path Traversal in Fit2Cloud Jumpserver

🗓️ 12 Oct 2023 08:45:46Reported by C1ph3rX13Type

Exploit for Path Traversal in Fit2Cloud Jumpserver, arbitrary file write vulnerability, GetShell using CVE-2023-42819 and CVE-2023-4282

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Improper Authentication in Fit2Cloud Jumpserver	14 Oct 202309:35	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fit2Cloud Jumpserver	14 Oct 202309:35	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Fit2Cloud Jumpserver	10 Oct 202306:32	–	githubexploit
ATTACKERKB	CVE-2023-42820	27 Sep 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the application software interface of the JumpServer system for auditing security operations and maintenance allows a perpetrator to bypass passwords.	10 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JumpServer security audit system arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to gain unauthorized access to protected information and modify the contents of arbitrary files within the system.	22 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-42819	12 Oct 202308:59	–	circl
Circl	CVE-2023-42820	27 Sep 202308:10	–	circl
CNNVD	Jumpserver Information Disclosure Vulnerability	27 Sep 202300:00	–	cnnvd
CNNVD	Jumpserver Path Traversal Vulnerability	27 Sep 202300:00	–	cnnvd