VULNERABILITY INTELLIGENCE

CVE-2024-24763

CVSS score4.3 MEDIUM
EPSS probability1.06%
CISA KEVNot currently listed
Published2024-02-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Description

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to version 3.10.0, attackers can exploit this vulnerability to construct malicious links, leading users to click on them, thereby facilitating phishing attacks or cross-site scripting attacks. Version 3.10.0 contains a patch for this issue. No known workarounds are available.

Weakness classification

  • security-advisories@github.com: CWE-601
  • nvd@nist.gov: CWE-601

Primary references