CVE-2024-51381

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-51381

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51381.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-51381

Published

2024-11-05T00:00:00Z

Modified

2026-07-15T01:49:00.965209070Z

Severity

8.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts. This critical flaw can lead to unauthorized activities, compromising the security and integrity of the platform, especially if an attacker gains administrative control.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/51xxx/CVE-2024-51381.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/jatos/jatos

Affected ranges

Type

GIT

Repo

https://github.com/jatos/jatos

Events

Introduced

694d15402ee5e3853f05f48ffe38bb612e7a1804

Last affected

694d15402ee5e3853f05f48ffe38bb612e7a1804

Database specific

{
    "cpe": "cpe:2.3:a:jatos:jatos:3.9.3:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "3.9.3"
        },
        {
            "last_affected": "3.9.3"
        }
    ]
}

Affected versions

3.*

3.9.3

v3.*

v3.9.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-51381.json"