PT-2023-26035 · Unknown · Issabel-Pbx
CVSS v3.1
4.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
issabel-pbx version 4.0.0-6
Description
A Cross Site Request Forgery (CSRF) issue allows a remote attacker to cause a denial of service via the delete new virtual fax function.
Recommendations
For issabel-pbx version 4.0.0-6, consider disabling the delete new virtual fax function as a temporary workaround until a patch is available. Restrict access to this function to minimize the risk of exploitation.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Issabel-Pbx