CVE-2021-31584

Sipwise C5 NGCP wwwcsc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges...

CVE-2021-31584

CVE-2021-31584 affects Sipwise C5 NGCP CSC; CSRF allows performing actions with administrative privileges via the www_csc interface for versions up to CE mr3.8.13 (3.6.4). Documented impacts include cross-site requests made by authenticated users to admin endpoints; exploit information exists (CS...

Sipwise C5 NGCP CSC Cross Site Request Forgery

Sipwise C5 NGCP CSC CSRF Click2Dial Exploit Vendor: Sipwise GmbH Product web page: https://www.sipwise.com Affected version: =CEm39.3.1 NGCP wwwadmin version 3.6.7 Summary: Sipwise C5 also known as NGCP - the Next Generation Communication Platform is a SIP-based Open Source Class 5 VoIP soft-swit...