CVE-2022-42225: FIT2CLOUD Lina

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Jumpserver 2.10.0 <= version <= 2.26.0 contains multiple stored XSS vulnerabilities because of improper filtering of user input, which can execute any javascript under admin's permission.

Affected products

• FIT2CLOUD Lina: from 2.10.0, up to and including 2.26.0

Published 2023-05-24. Last modified 2026-06-17.