VulnSocial

CVE-2025-58044Disclosure(fit2cloud / jumpserver)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5.

fit2cloud CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-601

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • jumpserver

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
fit2cloud
Products
jumpserver

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-26: 1Technical Details · 2026-03-26: 103-26
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2025-58044 - medium 🚨 JumpServer - Open Redirect via Referer Header > JumpServer is an open source bastion host and an operation and maintenance security a... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-58044 @pdnuclei #NucleiTemplates #cve

    Post summary

    The tweet announces CVE-2025-58044, describing an open redirect vulnerability in JumpServer that exploits the Referer header, and provides a link to ProjectDiscovery’s library but offers no PoC, exploit code, or guidance on remediation.

    00010234
    905 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfit2cloudjumpserver---

Explore more

Back to dashboardfit2cloud CVEsjumpserver vulnerabilities