TI-2024-16280 Aliases CVE-2024-24763

JumpServer Open Redirect Vulnerability

LOW 29CWE-601Published 2024-02-20 · Updated 2024-08-01

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Spoofing
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-601.

Summary

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to version 3.10.0, attackers can exploit this vulnerability to construct malicious links, leading users to click on them, thereby facilitating phishing attacks or cross-site scripting attacks. Version 3.10.0 contains a patch for this issue. No known workarounds are available.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01057 64th percentileScored 2026-11-07

Fix Fixed jumpserver (jumpserver): 3.10.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
jumpserver	jumpserver	before 3.10.0	3.10.0	Patch available	CNA

jumpserver Vendorjumpserver Affected before 3.10.0 Fixed in 3.10.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:fit2cloud:jumpserver::::::::	before 3.10.0	Vulnerable	1Panel-dev

cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:* Versions before 3.10.0 Vulnerable ·1Panel-dev

Remediation

Fix · CNA jumpserver (jumpserver) Fixed in 3.10.0

Timeline

2026-10-02 Threatist record created from CVE-2024-24763

References

Advisory 1

https://github.com/jumpserver/jumpserver/security/advisories/GHSA-p2mq-cm25-g4m5

Other 1

https://github.com/jumpserver/jumpserver/releases/tag/v3.10.0

TI-2024-27040 Arbitrary File Read in Ansible Playbooks in Jumpserver CVSS 3.1CRITICAL 10.0
TI-2023-23378 Non-MFA account takeover via using only SSH public key to login in jumpserver CVSS 3.1CRITICAL 9.1
TI-2023-22607 JumpServer session replays download without authentication CVSS 3.1HIGH 8.2
TI-2024-27041 Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver CVSS 3.1CRITICAL 10.0
TI-2024-19371 JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery CVSS 3.1CRITICAL 10.0
TI-2024-19370 JumpServer's insecure Ansible playbook validation leads to RCE in Celery CVSS 3.1CRITICAL 10.0

See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences