JumpServer漏洞通知及修复方案

/api/v1/authentication/connection-token/
/api/v1/users/connection-token/

/etc/nginx/conf.d/jumpserver.conf
# 企业老版本
jumpserver-release/nginx/http_server.conf
# 新版本在 
jumpserver-release/compose/config_static/http_server.conf
Nginx配置文件实例为：

#保证在 /api 之前 和 / 之前
location /api/v1/authentication/connection-token/ {
   return 403;
}

location /api/v1/users/connection-token/ {
   return 403;
}
#新增以上这些

location /api/ {
    proxy_set_header X-Real-IP remote_addr;
    proxy_set_header Hosthost;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_pass http://core:8080;
  } 
...