CVE-2026-54336: falha de média gravidade em jumpserver
JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset
Publicada em · Atualizada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.3%
probabilidade de exploração
0.3%top 74% das CVEs
exploração observada
nãonenhuma fonte reporta
JumpServer is an open source bastion host and an operation and maintenance security audit system. From 4.8.0 until 4.10.17, an authenticated user with SFTP permission to an authorized asset can submit crafted traversal paths through the KoKo Web Terminal SFTP feature, causing AssetDir.GetRealPath() in pkg/srvconn/sftp_asset.go to resolve paths outside the intended SFTP root and permit read, list, write, rename, or delete operations under the configured backend account on that asset. This issue is fixed in version 4.10.17.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
jumpserver · jumpserverCVEs relacionadas — jumpserver
No mesmo produto, das mais perigosas para as menos.
CVE-2023-42442HIGHJumpServer session replays download without authenticationEPSS 63.0%CVE-2023-42820HIGHRandom seed leakage in JumpserverEPSS 6.3%CVE-2024-29201CRITICALJumpServer's insecure Ansible playbook validation leads to RCE in CeleryEPSS 6.0%CVE-2024-29202CRITICALJumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in CeleryEPSS 5.9%CVE-2023-42819HIGHPath traversal in JumpserverEPSS 2.2%CVE-2023-43651HIGHRemote code execution on the host system via MongoDB shell in jumpserverEPSS 2.1%