Cross site request forgery (csrf)

2023-07-1117:15:00

PRIOn knowledge base

www.prio-n.com

csrf

vulnerability

issabel-pbx

remote attacker

denial of service

deleteuser function

nvd

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function.

CPENameOperatorVersion
pbxeq4.0.0-6

CPE	Name	Operator	Version
	pbx	eq	4.0.0-6

References

github.com/sahiloj/CVE-2023-37596/blob/main/README.md

reference1.example.com/index.php?menu=userlist