Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 13:33:35 +0000 bdu:2023-08027 https://cve.radiocsirt.org/vuln/bdu:2023-08027 bdu:2023-08027 https://cve.radiocsirt.org/vuln/bdu:2023-08027 EUVD-2026-187325 https://cve.radiocsirt.org/vuln/euvd-2026-187325 EUVD-2026-187325 https://cve.radiocsirt.org/vuln/euvd-2026-187325 fkie_cve-2023-42819 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42819 <p>JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the &#39;Job-Template&#39; menu and create a playbook named &#39;test&#39;. Get the playbook id from the detail page, like &#39;e0adabef-c38f-492d-bd92-832bacc3df5f&#39;. An attacker can exploit the directory traversal flaw using the provided URL to access and retrieve the contents of the file. `https://jumpserver-ip/api/v1/ops/playbook/e0adabef-c38f-492d-bd92-832bacc3df5f/file/?key=../../../../../../../etc/passwd` a similar method to modify the file content is also present. This issue has been addressed in version 3.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the &#39;Job-Template&#39; menu and create a playbook named &#39;test&#39;. Get the playbook id from the detail page, like &#39;e0adabef-c38f-492d-bd92-832bacc3df5f&#39;. An attacker can exploit the directory traversal flaw using the provided URL to access and retrieve the contents of the file. `https://jumpserver-ip/api/v1/ops/playbook/e0adabef-c38f-492d-bd92-832bacc3df5f/file/?key=../../../../../../../etc/passwd` a similar method to modify the file content is also present. This issue has been addressed in version 3.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42819 gsd-2023-42819 https://cve.radiocsirt.org/vuln/gsd-2023-42819 gsd-2023-42819 https://cve.radiocsirt.org/vuln/gsd-2023-42819