PT-2024-34617 · Jatos · Jatos

Published 2024-11-05 · Updated 2025-06-24 · CVE-2024-51382

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JATOS version 3.9.3

Description A Cross-Site Request Forgery (CSRF) issue allows an attacker to reset the administrator's password, resulting in unauthorized access to the platform. This can enable attackers to hijack admin accounts and compromise the system's integrity and security.

Recommendations For JATOS version 3.9.3, as a temporary workaround, consider restricting access to the password reset functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-51382

Affected Products

Jatos

References · 6

• 🔥 https://hacking-notes.medium.com/cve-2024-51382-jatos-v3-9-3-csrf-admin-password-reset-1adeff0386ed · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51382 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51382 · Vendor Advisory
• https://t.me/cvedetector/9940 · Telegram Post
• https://twitter.com/CVEnew/status/1853870989714612229 · Twitter Post
• https://t.me/cvenotify/126470 · Telegram Post