Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts. This critical flaw can lead to unauthorized activities, compromising the security and integrity of the platform, especially if an attacker gains administrative control.
References
| Link | Resource |
|---|---|
| https://hacking-notes.medium.com/cve-2024-51381-jatos-v3-9-3-csrf-admin-account-creation-94035f24d0be | Exploit Third Party Advisory |
Configurations
History
24 Jun 2025, 13:20
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:jatos:jatos:3.9.3:*:*:*:*:*:*:* | |
| First Time |
Jatos
Jatos jatos |
|
| References | () https://hacking-notes.medium.com/cve-2024-51381-jatos-v3-9-3-csrf-admin-account-creation-94035f24d0be - Exploit, Third Party Advisory |
Information
Published : 2024-11-05 19:15
Updated : 2025-06-24 13:20
NVD link : CVE-2024-51381
Mitre link : CVE-2024-51381
CVE.ORG link : CVE-2024-51381
JSON object : View
Products Affected
jatos
- jatos
CWE
CWE-352
Cross-Site Request Forgery (CSRF)