VULNERABILITY INTELLIGENCE

CVE-2024-51381

CVSS score8.4 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-11-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts. This critical flaw can lead to unauthorized activities, compromising the security and integrity of the platform, especially if an attacker gains administrative control.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-352

Primary references