CVE-2023-20221

Cisco IP Phone 6800/7800/8800 Series with Multiplatform Firmware are affected by CVE-2023-20221, a CSRF flaw in the web-based management interface. The issue arises from insufficient CSRF protections, enabling an unauthenticated, remote attacker to lure an authenticated user to follow a crafted l...