CVEs-PoC/2021/CVE-2021-3169.md

CVE-2021-3169

Description

An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through an API which does not have access control and use it to access sensitive assets.

POC

Reference

• https://mp.weixin.qq.com/s/5tgcaIrnDnGP-LvWPw9YCg

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection