Security Advisory

CVE-2025-58044

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-01 20:17:44

Last updated 2025-12-01 20:33:33

Assigner GitHub_M

CVSS score 5.5

State PUBLISHED

Description

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5.

← Browse all CVEs View on cve.org ↗