Lucene search
HistoryJun 27, 2023 - 6:15 p.m.
CVE-2023-34839
csrf
issabel pbx
remote attacker
custom exploit
new user privilege
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.2%
A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to create new user function in the application.
Affected configurations
Node
issabelpbxMatch4.0.0-6
Related
prion
prion
Cross site request forgery (csrf)
2023-06-27 18:15:00
cvelist
cvelist
CVE-2023-34839
2023-06-27 00:00:00
cve
cve
CVE-2023-34839
2023-06-27 18:15:13
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.2%
Related for NVD:CVE-2023-34839