Lucene search
JpcertCVELIST:CVE-2023-22286HistoryJan 17, 2023 - 12:00 a.m.
CVE-2023-22286
2023-01-1700:00:00
jpcert
www.cve.org
2
csrf
maho-pbx
vulnerability
authentication
hijack
remote attacker
Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to hijack the user authentication and conduct user’s unintended operations by having a user to view a malicious page while logged in.
CNA Affected
[
{
"vendor": "Mahoroba Kobo, Inc.",
"product": "MAHO-PBX NetDevancer series",
"versions": [
{
"version": "MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2023-22286
2023-01-17 10:15:11
nvd
nvd
CVE-2023-22286
2023-01-17 10:15:11
prion
prion
Cross site request forgery (csrf)
2023-01-17 10:15:00
jvn
jvn
JVN#99957889: Multiple vulnerabilities in MAHO-PBX NetDevancer series
2023-01-11 00:00:00