CVE-2024-51144
Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message', pvmsg.php?action=confirm_delete , and ajax.server.php?page=user&action=flip_follow endpoints in Ampache <= 6.6.0.
- Score
- CVSS 3.1 8.8 High
- Status
- Deferred - cve@mitre.org
- Published
- 2025-03-05
- Last modified
- 2025-09-30
- Weaknesses
- CWE-352
References
- https://github.com/ampache/ampache
- https://nitipoom-jar.github.io/CVE-2024-51144/
- https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2024-51144
