VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 1, 2025· Updated Jun 17, 2026

CVE-2025-58044

CVE-2025-58044

Description

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Jumpserver/Jumpserverllm-fuzzy2 versions
    <3.10.19, <4.10.5+ 1 more
    • (no CPE)range: <3.10.19, <4.10.5
    • (no CPE)range: < 3.10.19

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.