Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password. This critical security flaw can result in unauthorized access to the platform, enabling attackers to hijack admin accounts and compromise the integrity and security of the system.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://hacking-notes.medium.com/cve-2024-51382-jatos-v3-9-3-csrf-admin-password-reset-1adeff0386ed | Exploit Third Party Advisory |
Configurations
History
24 Jun 2025, 13:13
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:jatos:jatos:3.9.3:*:*:*:*:*:*:* | |
| References | () https://hacking-notes.medium.com/cve-2024-51382-jatos-v3-9-3-csrf-admin-password-reset-1adeff0386ed - Exploit, Third Party Advisory | |
| First Time |
Jatos jatos
Jatos |
05 Nov 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-05 19:15
Updated : 2025-06-24 13:13
NVD link : CVE-2024-51382
Mitre link : CVE-2024-51382
JSON object : View
Products Affected
jatos
- jatos
CWE
No CWE.