Beveiligingsadvies

CVE-2023-0480

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-04 00:00:00
Laatst bijgewerkt 2025-02-13 16:17:43
Toegewezen door Fluid Attacks
CVSS-score 8.8
Status PUBLISHED

Beschrijving

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF.