JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery

JumpServer's insecure Ansible playbook validation leads to RCE in Celery

Remote code execution on the host system via MongoDB shell in jumpserver

JumpServer Koko vulnerable to Command Injection for Kubernetes Connection

Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver

Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command filtering function

SSH public key login without private key challenge if mfa is enabled in jumpserver

Arbitrary File Read in Ansible Playbooks in Jumpserver

Non-MFA account takeover via using only SSH public key to login in jumpserver