CVE-2024-26653

Summary

CVE-2024-29024 is a newly disclosed vulnerability affecting JumpServer, an open-source bastion host and security audit system. The issue involves an Insecure Direct Object Reference (IDOR) weakness in the file manager's bulk transfer functionality. By manipulating job IDs, authenticated users can upload malicious files, posing a risk to the system's integrity and security. This vulnerability has been addressed in version 3.10.6, making it crucial for users to update their installations accordingly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.