CVE-2024-51144: CSRF
Published Mar 5, 2025
·Updated
Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=addmessage', pvmsg.php?action=confirmdelete , and ajax.server.php?page=user&action=flipfollow endpoints in Ampache <= 6.6.0.
Affected Software
1 affected component
Ampache Ampache<=6.6.0
Event History
Mar 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51144?
CVE-2024-51144 is classified as a high severity Cross Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2024-51144?
To fix CVE-2024-51144, it is recommended to upgrade Ampache to version 6.6.1 or later.
3
What endpoints are affected by CVE-2024-51144?
CVE-2024-51144 affects the 'pvmsg.php?action=add_message', 'pvmsg.php?action=confirm_delete', and 'ajax.server.php?page=user&action=flip_follow' endpoints.
4
What software does CVE-2024-51144 affect?
CVE-2024-51144 affects Ampache versions up to and including 6.6.0.
5
What type of vulnerability is CVE-2024-51144?
CVE-2024-51144 is a Cross Site Request Forgery (CSRF) vulnerability that may allow unauthorized actions on behalf of users.