CVEvulnerability
CVE-2024-51382
8.4 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.4 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-352
Description
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password. This critical security flaw can result in unauthorized access to the platform, enabling attackers to hijack admin accounts and compromise the integrity and security of the system.
Affected configurations
• jatos jatos 3.9.3
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://hacking-notes.medium.com/cve-2024-51382-jatos-v3-9-3-csrf-admin-password-reset-1adeff0386ed Exploit, Third Party Advisory