Home > Vulnerability Database > CVE-2025-58044

Mend.io Vulnerability Database

CVE-2025-58044

Good to know:

Date: December 1, 2025

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. This vulnerability is fixed in v3.10.19 and v4.10.5.

Severity Score

0.0

Related Resources (4)

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-58044

Url: https://github.com/jumpserver/jumpserver/security/advisories/GHSA-h762-mj7p-jwjq

Url: https://github.com/jumpserver/jumpserver/commit/36ae076cb021f16d2053a63651bc16d15a3ed53b

Url: https://www.mend.io/vulnerability-database/CVE-2025-58044

Weakness Type (CWE)

URL Redirection to Untrusted Site ('Open Redirect')

CWE-601

Top Fix

Upgrade Version

Upgrade to version https://github.com/jumpserver/jumpserver.git - v3.10.19;https://github.com/jumpserver/jumpserver.git - v4.10.5

Learn More

CVSS v3.1

Base Score:	0.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	NONE