{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-18T01:29:39.256","vulnerabilities":[{"cve":{"id":"CVE-2024-24763","sourceIdentifier":"security-advisories@github.com","published":"2024-02-20T18:15:52.520","lastModified":"2024-12-17T20:03:30.613","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to version 3.10.0, attackers can exploit this vulnerability to construct malicious links, leading users to click on them, thereby facilitating phishing attacks or cross-site scripting attacks. Version 3.10.0 contains a patch for this issue. No known workarounds are available."},{"lang":"es","value":"JumpServer es un host bastión de código abierto y un sistema de auditoría de seguridad de operación y mantenimiento. Antes de la versión 3.10.0, los atacantes podían aprovechar esta vulnerabilidad para construir enlaces maliciosos, lo que inducía a los usuarios a hacer clic en ellos, facilitando así los ataques de phishing o de Cross-site scripting. La versión 3.10.0 contiene un parche para este problema. No hay workarounds disponibles."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:*","versionEndExcluding":"3.10.0","matchCriteriaId":"DE6F7358-C278-4049-9549-401D3975EEE1"}]}]}],"references":[{"url":"https://github.com/jumpserver/jumpserver/releases/tag/v3.10.0","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-p2mq-cm25-g4m5","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/jumpserver/jumpserver/releases/tag/v3.10.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-p2mq-cm25-g4m5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}