High severity8.8NVD Advisory· Published Mar 5, 2025· Updated Apr 15, 2026

CVE-2024-51144

Description

Cross Site Request Forgery (CSRF) vulnerability exists in the 'pvmsg.php?action=add_message', pvmsg.php?action=confirm_delete , and ajax.server.php?page=user&action=flip_follow endpoints in Ampache <= 6.6.0.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

nitipoom-jar.github.io/CVE-2024-51144/nvd
nitipoom-jaroonchaipipat.github.io/security-research-portal/2024-51144nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000