CVE-2023-42819

JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the 'Job-Template' menu and create a playbook named 'test'. Get the playbook id from the detail page, like 'e0adabef-c38f-492d-bd92-832bacc3df5f'. An attacker can exploit the directory traversal flaw using the provided URL to access and retrieve the contents of the file. `https://jumpserver-ip/api/v1/ops/playbook/e0adabef-c38f-492d-bd92-832bacc3df5f/file/?key=../../../../../../../etc/passwd` a similar method to modify the file content is also present. This issue has been addressed in version 3.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-22

• https://github.com/jumpserver/jumpserver/commit/d0321a74f1713d031560341c8fd0a1859e6510d8Patch
• https://github.com/jumpserver/jumpserver/security/advisories/GHSA-ghg2-2whp-6m33Mitigation, Vendor Advisory
• https://github.com/jumpserver/jumpserver/commit/d0321a74f1713d031560341c8fd0a1859e6510d8Patch
• https://github.com/jumpserver/jumpserver/security/advisories/GHSA-ghg2-2whp-6m33Mitigation, Vendor Advisory

Published

Sep 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42813Kyverno is a policy engine designed for Kubernetes. A securi…5.3
• CVE-2023-42814Kyverno is a policy engine designed for Kubernetes. A securi…5.3
• CVE-2023-42815Kyverno is a policy engine designed for Kubernetes. A securi…5.3
• CVE-2023-42816Kyverno is a policy engine designed for Kubernetes. A securi…5.3
• CVE-2023-42817Pimcore admin-ui-classic-bundle provides a Backend UI for Pi…5.4
• CVE-2023-42818JumpServer is an open source bastion host. When users enable…9.8
• CVE-2023-4282The EmbedPress plugin for WordPress is vulnerable to unautho…4.3
• CVE-2023-42820JumpServer is an open source bastion host. This vulnerabilit…8.2
• CVE-2023-42821The package `github.com/gomarkdown/markdown` is a Go library…7.5
• CVE-2023-42822xrdp is an open source remote desktop protocol server. Acces…6.5
• CVE-2023-42823The issue was resolved by sanitizing logging This issue is f…5.5
• CVE-2023-42824The issue was addressed with improved checks. This issue is …7.8