Back to Database
Status published
Medium
CVE-2025-58044
JumpServer has an Open Redirect Vulnerability
Vulnerability Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58044
Credits & Attribution
No credits recorded in the NVD database.
References
More from jumpserver
View All →CVE-2025-62795
JumpServer Unauthorized LDAP Configuration Access via WebSocket
High
7.1
CVE-2025-62712
JumpServer Connection Token Leak Vulnerability
Critical
9.6
CVE-2025-27095
JumpServer has a Kubernetes Token Leak Vulnerability
Medium
4.3
CVE-2024-40629
Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
Critical
10
CVE-2024-40628
Arbitrary File Read in Ansible Playbooks in Jumpserver
Critical
10
Affected Vendor
jumpserver
View all reports →Affected Software
jumpserver
Vulnerable Versions:
< 3.10.19, >= 4.0.0, < 4.10.5
Timeline
Official Publish:
December 1st, 2025
Last Modified:
December 1st, 2025
Added to House:
July 22nd, 2026