CVE-2023-43651
1 advisory.
Go/github.com/jumpserver/koko CVE-2023-43651: medium 6.4, EPSS 2.11%
Jumpserver Koko vulnerable to remote code execution on the host system via MongoDB shell
Action: Upgrade github.com/jumpserver/koko to 2.28.20 or later.
go get github.com/jumpserver/koko@v2.28.20go get github.com/jumpserver/koko@v3.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.28.20 | - |
| 3.0.0 | 3.7.1 | - |
Fixed versions
| 2.28.20 | 3.7.1 |
Sources
- osv: GHSA-4r5x-x283-wm96
- https://github.com/jumpserver/jumpserver/security/advisories/GHSA-4r5x-x283-wm96
- https://nvd.nist.gov/vuln/detail/CVE-2023-43651
- https://github.com/jumpserver/koko/commit/7d80db95d17c8f42bdf50260dfc21dc2bd0452c2
- https://github.com/jumpserver/koko/commit/857f8b9e41f0930dc6190a35d8601fffa5e884e7
- https://github.com/jumpserver/koko
CVE-2023-43651 · published · modified · JSON