CVE-2024-29201

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-29201
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29201.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-29201
Aliases
  • GHSA-pjpp-cm9x-6rwj
Published
2024-03-29T14:57:40.323Z
Modified
2026-03-14T12:33:09.656682Z
Severity
  • 9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
JumpServer's insecure Ansible playbook validation leads to RCE in Celery
Details

JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass the input validation mechanism in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container runs with root privileges and has database access, attackers could steal sensitive information from all hosts or manipulate the database. This vulnerability is fixed in v3.10.7.

Database specific 
{
    "cwe_ids": [
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29201.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/jumpserver/jumpserver

Affected ranges

Type
GIT
Repo
https://github.com/jumpserver/jumpserver
Events
Introduced
7d3eb8c75d7edeb1cca3da25ae435acf678c4f69
Fixed
4f34ce5edb6be43fe01468faad4f158a82a08dce

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29201.json"