CVE-2024-24763CWE-601

JumpServer Open Redirect Vulnerability

Medium · published February 20, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to version 3.10.0, attackers can exploit this vulnerability to construct malicious links, leading users to click on them, thereby facilitating phishing attacks or cross-site scripting attacks. Version 3.10.0 contains a patch for this issue. No known workarounds are available.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01057 · 64.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-02-20T17:35Z
EPSS history
Timeline
  • 20 FEB 17:35Z
    JumpServer Open Redirect Vulnerability
    cvelistv5