Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jumpserver | jumpserver | < 3.10.19, >= 4.0.0, < 4.10.5 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- JumpServer - Open Redirect via Referer Header http/cves/2025/CVE-2025-58044.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.