CVE-2023-42819

Summary

CVE-2023-42819 is a vulnerability affecting JumpServer, an open source bastion host. This issue allows logged-in users to access and modify any file on the system through a directory traversal flaw. By creating a playbook named 'test' and using a specially crafted URL, an attacker can retrieve the contents of sensitive files, including the system's /etc/passwd file. A similar method can be used to modify file contents. JumpServer users are strongly urged to upgrade to version 3.6.5 to mitigate this vulnerability. No known workarounds are available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.