CVE-2023-43650

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-43650

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43650.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2023-43650

Aliases

GHSA-mwx4-8fwc-2xvw

Published

2023-09-27T18:33:46.034Z

Modified

2025-11-29T14:42:33.053917Z

Severity

8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator

Summary

Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver

Details

JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-force attacks due to the absence of rate limiting. JumpServer provides a feature allowing users to reset forgotten passwords. Affected users are sent a 6-digit verification code, ranging from 000000 to 999999, to facilitate the password reset. Although the code is only available in 1 minute, this window potentially allows for up to 1,000,000 validation attempts. This issue has been addressed in versions 2.28.20 and 3.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-640"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43650.json"
}

References

Affected packages

Git / github.com/jumpserver/jumpserver

Affected ranges

Type

GIT

Repo

https://github.com/jumpserver/jumpserver

Events

Introduced

92fc0ceb1632b55e62a10a6aa8fcc6ecc7153cb0

Fixed

c28cca7ca20025d4793a7db9295280ca56841399

Database specific

{
    "versions": [
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.28.20"
        }
    ]
}

Type

GIT

Repo

https://github.com/jumpserver/jumpserver

Events

Introduced

7d3eb8c75d7edeb1cca3da25ae435acf678c4f69

Fixed

e75da94fc15a05e254132014b67be25c32c0cdc2

Database specific

{
    "versions": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.7.1"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43650.json"