Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3. The vulnerability exists in the description component of the study section, where an attacker can inject JavaScript into the description field. This allows for the execution of malicious scripts when an admin views the description, potentially leading to account takeover and unauthorized actions.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://hacking-notes.medium.com/cve-2024-51379-jatos-v3-9-3-stored-xss-description-component-de49d0077a96 | Exploit Third Party Advisory |
Configurations
History
24 Jun 2025, 13:28
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jatos jatos
Jatos |
|
| References | () https://hacking-notes.medium.com/cve-2024-51379-jatos-v3-9-3-stored-xss-description-component-de49d0077a96 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:jatos:jatos:3.9.3:*:*:*:*:*:*:* |
05 Nov 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-05 19:15
Updated : 2025-06-24 13:28
NVD link : CVE-2024-51379
Mitre link : CVE-2024-51379
JSON object : View
Products Affected
jatos
- jatos
CWE
No CWE.