CyberRota Analysis
AI-GeneratedJumpServer versions prior to 4.10.17 are vulnerable to an injection flaw that allows authenticated administrators with specific permissions to inject Jinja2 expressions into critical fields, leading to the execution of arbitrary commands on the JumpServer control node. This vulnerability poses a medium risk as it could enable unauthorized access and manipulation of the system. Organizations using JumpServer should prioritize upgrading to version 4.10.17 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing Ansible to evaluate ansible_host inventory data or playbook variables during Applet Host deployment and execute arbitrary commands on the JumpServer control node. This issue is fixed in version 4.10.17.