JumpServer Open Redirect Vulnerability in I18N Endpoint

An open redirect vulnerability has been identified in JumpServer, an open-source bastion host and operation maintenance security audit system. The issue is present in versions prior to v3.10.19 and v4.10.5. The vulnerability arises because the /core/i18n// endpoint improperly validates the Referer header before using it as a redirection target, allowing for open redirect exploitation.

Impact

Exploitation of this vulnerability allows for open redirect, where users can be redirected to malicious sites under certain conditions.

Reproduction

To reproduce this vulnerability, send a request to the /core/i18n/ko/ endpoint with a Referer header pointing to an external site, such as Google. The server will redirect the request based on the Referer header without proper validation, demonstrating the open redirect vulnerability.

Remediation

Users are advised to upgrade to JumpServer versions v3.10.19 or v4.10.5.