Stored XSS Vulnerabilities in Jumpserver Affected by Improper User Input Filtering

CVE-2022-42225

What is CVE-2022-42225?

Jumpserver versions from 2.10.0 to 2.26.0 are susceptible to multiple stored Cross-Site Scripting (XSS) vulnerabilities. These issues arise due to inadequate input validation, allowing attackers to inject malicious JavaScript code that executes with administrator privileges. This can lead to unauthorized actions performed by admins, compromising the security of the entire Jumpserver system. It is essential for users to upgrade to the latest versions or apply necessary patches to mitigate these risks.

References