Vulnerabilities

TI-2024-36739 CVE-2024-55008 · GHSA-jxq8-vf97-xqr3

JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication…

HIGH 72

JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent legitimate users from accessing their accounts by repeatedly sending multiple failed login attempts…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00834 Published 2025-01-07 No fix listed CWE-307

TI-2024-34349 CVE-2024-51382 · GHSA-5grf-38mv-vxvv

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to…

HIGH 72

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00253 Published 2024-11-05 No fix listed CWE-352

TI-2024-34348 CVE-2024-51381 · GHSA-hm9x-5qmp-g6fq

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to…

HIGH 72

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00253 Published 2024-11-05 No fix listed CWE-352

TI-2024-34347 CVE-2024-51380 · GHSA-qvc8-jp6r-8639

Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of…

HIGH 72

Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.0051 Published 2024-11-05 No fix listed CWE-79

TI-2024-34346 CVE-2024-51379 · GHSA-w9pr-cvj2-cxfc

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.

HIGH 72

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00644 Published 2024-11-05 No fix listed CWE-79

TI-2022-04471 CVE-2022-4878 · GHSA-mr22-3rrp-47cx

JATOS ZIP ZipUtil.java ZipUtil path traversal

LOW 26

A vulnerability classified as critical has been found in JATOS.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00711 Published 2023-01-06 No fix listed CWE-22

Vulnerabilities

Filters

JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication…

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to…

Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to…

Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of…

Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.

JATOS ZIP ZipUtil.java ZipUtil path traversal