Sploitus

25 exploited vulnerabilities in Jumpserver

Vulnerabilities with publicly known exploits

Vendors
Ansible, Celery, Unknown, Jinja2, Mongodb, Fit2Cloud
With known exploits
25
Affected fit2cloud Jumpserver versions
< 3.10.12, 3.5.6, 3.6.5, 3.10.7, 3.8.0, 3.10.20, 4.10.11, 2.28.20, 3.7.1, 3.5.5, 3.6.4, 3.10.21, 4.10.12, 2.28.19, 3.10.19, 4.10.5, 3.10.0, 2.28.8, 3.10.6, 4.10.16, 3.10.18, 4.8.0
Affected fit2cloud Koko versions
All versions
Affected fit2cloud Lina versions
≤ 2.26.0

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2024-40629
CVSS 10.0 CRITICAL 2024-07-18FIX AVAILABLE
CVE-2024-40628
CVSS 10.0 CRITICAL 2024-07-18FIX AVAILABLE
CVE-2023-42818
CVSS 10.0 HIGH 2023-09-27FIX AVAILABLE
CVE-2024-29202
CVSS 9.9 CRITICAL 2024-03-29FIX AVAILABLE
CVE-2024-29201
CVSS 9.9 CRITICAL 2024-03-29FIX AVAILABLE
CVE-2023-48193
CVSS 9.8 CRITICAL 2023-11-28FIX AVAILABLE
CVE-2025-62712
CVSS 9.6 CRITICAL 2025-10-30FIX AVAILABLE
CVE-2023-43652
CVSS 9.4 HIGH 2023-09-27FIX AVAILABLE
CVE-2023-43651
CVSS 9.0 HIGH 2023-09-27FIX AVAILABLE
CVE-2023-42819 1 exploit
CVSS 8.9 HIGH 2023-09-26FIX AVAILABLE
Exploit for Path Traversal in Fit2Cloud Jumpserver
CVE-2023-42442 4 exploits
CVSS 8.5 HIGH 2023-09-15FIX AVAILABLE
Exploit for Improper Authentication in Fit2Cloud JumpserverExploit for Improper Authentication in Fit2Cloud Jumpserver
CVE-2023-43650
CVSS 8.2 HIGH 2023-09-27FIX AVAILABLE
CVE-2025-62795
CVSS 7.1 HIGH 2025-10-30FIX AVAILABLE
CVE-2023-42820 4 exploits
CVSS 7.0 HIGH 2023-09-14FIX AVAILABLE
Exploit for Improper Authentication in Fit2Cloud JumpserverExploit for Improper Authentication in Fit2Cloud Jumpserver
CVE-2025-58044 1 exploit
CVSS 6.9 MEDIUM 2025-12-01FIX AVAILABLE
open-redirect-poc
CVE-2026-31864
CVSS 6.8 MEDIUM 2026-03-13
CVE-2024-24763
CVSS 6.1 MEDIUM 2024-02-20FIX AVAILABLE
CVE-2023-28110
CVSS 5.7 MEDIUM 2023-03-16FIX AVAILABLE
CVE-2022-42225
CVSS 5.4 MEDIUM 2023-05-24
CVE-2024-29024
CVSS 5.3 MEDIUM 2024-03-29FIX AVAILABLE
CVE-2024-29020
CVSS 5.3 MEDIUM 2024-03-29FIX AVAILABLE
CVE-2023-46123
CVSS 5.3 MEDIUM 2023-10-24FIX AVAILABLE
CVE-2026-31798
CVSS 5.0 MEDIUM 2026-03-13FIX AVAILABLE
CVE-2025-27095
CVSS 4.3 MEDIUM 2025-03-31FIX AVAILABLE
CVE-2023-46138
CVSS 3.7 LOW 2023-10-30FIX AVAILABLE