4.6
Medium
CVE-2024-29024 JumpServer is an open source bastion host and an operation and maintenance security audit system
Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability in the file manager's bulk transfer by manipulating job IDs to upload malicious files, potentially compromising the integrity and security of the system. This vulnerability is fixed in v3.10.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jumpserver 3.0 | 3.0.0 → 3.10.5 | No fix stated |
| jumpserver 3.0 | 3.0.0 → 3.10.5 | No fix stated |
Other CVEs of jumpserver
The 27 CVEs of jumpserver →
CVE-2026-104126
JumpServer is an open source bastion host and an operation and maintenance security audit system
6.0
Medium
CVE-2026-44846
JumpServer is an open source bastion host and an operation and maintenance security audit system
6.2
Medium
CVE-2026-44845
JumpServer is an open source bastion host and an operation and maintenance security audit system
6.7
Medium
CVE-2026-54336
JumpServer is an open source bastion host and an operation and maintenance security audit system
5.4
Medium