GCVE - cpe:2.3:a:jatos:jatos:3.9.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jatos:jatos:3.9.4:*:*:*:*:*:*:*

part: a version: 3.9.4 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/jatos/jatos`	purl2cpe	2026-06-01 10:11:58.273999

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-55008`	vulnerable	2026-06-08 06:54:16.895323	Details available JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent legitimate users from accessing their accounts by repeatedly sending multiple failed login attempts. Specifically, by submitting 3 incorrect login attempts every minute, the attacker can trigger the account lockout mechanism on the account level, effectively locking the user out indefinitely. Since the lockout is applied to the user account and not based on the IP address, any attacker can trigger the lockout on any user account, regardless of their privileges. Published: 2025-01-07T00:00:00.000Z Updated: 2026-07-05T00:53:25.479Z Open on db.gcve.eu Reference links https://hacking-notes.medium.com/cve-2024-51379-jatos-v3-9-4-account-lockout-denial-of-service-cc970f4ca58f	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.