Sploitus

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Fit2Cloud Jumpserver

CVE-2023-42820

githubexploit · 2023-10-10

Exploit Code

README60 lines
## https://sploitus.com/exploit?id=66F95A30-33DA-5EE7-A450-22DB16D94DE4
# CVE-2023-42820

CVE-2023-42820

## Vulnerability Description

JumpServer Password Reset Vulnerability

## Usage

### V2 Update

1. Fully refactored
2. Added support for using default accounts and emails when no account or email is received
3. Improved verification code recognition and calculation
4. Automatically modifies passwords
5. Disables unnecessary log outputs

![v2](https://raw.githubusercontent.com/C1ph3rX13/CVE-2023-42820/main/image/CVE-2023-42820%20v2.png)

### V1

To calculate the verification code, you need to specify the username corresponding to the email address. After execution, the system will automatically determine if there are any vulnerabilities and attempt to calculate the verification code.

~~~python
python CVE-2023-42820.py -t http://IP:Port -e email -u username

 ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗       ██╗  ██╗██████╗  █████╗ ██████╗  ██████╗
██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗      ██║  ██║╚════██╗██╔══██╗╚════██╗██╔═████╗
██║     ██║   ██║█████╗█████╗ █████╔╝██║██╔██║ █████╔╝ █████╔╝█████╗███████║ █████╔╝╚█████╔╝ █████╔╝██║██╔██║
██║     ╚██╗ ██╔╝██╔══╝╚════╝██╔═══╝  ████╔╝██║██╔═══╝  ╚═██╗╚════╝╚════██║██╔═══╝ ██╔══██╗██╔═══╝ ████╔╝██║
╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗██████╔╝           ██║███████╗╚█████╔╝███████╗╚██████╔╝
 ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚═════╝            ╚═╝╚══════╝ ╚════╝ ╚══════╝ ╚═════╝
                                                                            @Auth: C1ph3rX13
                                                                            @Blog: https://c1ph3rx13.github.io
                                                                            @Note: The code is for educational purposes only. Do not use it for other purposes.

Usage: CVE-2023-42820.py [-h] -t TARGET -e EMAIL -u USERNAME [--proxy PROXY]

CVE-2023-42820 by C1ph3rX13. Optional arguments:
  -h, --help            Show this help message and exit
  -t TARGET, --target TARGET
                        Target URL
  -e EMAIL, --email EMAIL
                        Account email
  -u USERNAME, --username USERNAME
                        Account username
  --proxy PROXY         Proxy to http://ip:port
~~~

![image-1](https://raw.githubusercontent.com/C1ph3rX13/CVE-2023-42820/main/image/1.png)

![image-2](https://raw.githubusercontent.com/C1ph3rX13/CVE-2023-42820/main/image/2.png)

## Disclaimer

1. This tool is intended only for penetration testers with legal authorization and network operations personnel who perform routine tasks. Users can download, copy, distribute, or use this tool under the condition of having sufficient legal authorization and for non-commercial purposes. 2. During the use of this tool, you must ensure that all your actions comply with local laws and regulations. Do not use this software for activities that violate the laws of the People’s Republic of China. All authors and contributors of this tool do not assume any responsibility for any illegal activities conducted by users using this tool. ### References

https://github.com/vulhub/vulhub/tree/master/base/jumpserver/3.6.3