CyberRota Analysis
AI-GeneratedJumpServer versions prior to 4.10.17 are vulnerable to a privilege escalation flaw that allows users with the `users.invite_user` permission to modify existing members' organization roles through the invitation API. This could lead to unauthorized privilege escalation or downgrading of administrative roles within the organization. Organizations using affected versions should prioritize upgrading to 4.10.17 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, a user with the users.invite_user permission can submit an existing member to POST /api/v1/users/users/invite/, causing the organization invitation logic in apps/users/api/user.py to execute user.org_roles.set(org_roles) and replace the member's existing organization roles, which can escalate privileges or downgrade administrators. This issue is fixed in version 4.10.17.