PT-2024-34616 · Jatos · Jatos

Published 2024-11-05 · Updated 2025-06-24 · CVE-2024-51381

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JATOS version 3.9.3

Description A Cross-Site Request Forgery (CSRF) issue allows attackers to perform actions reserved for administrators, including creating admin accounts. This flaw can lead to unauthorized activities, compromising the security and integrity of the platform, especially if an attacker gains administrative control.

Recommendations For JATOS version 3.9.3, update to a newer version that contains a fix for this issue to prevent unauthorized administrative actions. As a temporary workaround, consider restricting access to administrative functions to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-51381

Affected Products

Jatos

References · 6

• 🔥 https://hacking-notes.medium.com/cve-2024-51381-jatos-v3-9-3-csrf-admin-account-creation-94035f24d0be · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51381 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51381 · Vendor Advisory
• https://t.me/cvedetector/9939 · Telegram Post
• https://twitter.com/CVEnew/status/1853870988460544391 · Twitter Post
• https://t.me/cvenotify/126469 · Telegram Post