CVE-2023-0480

n/a / VitalPBX PUBLISHED

Description (CNA)

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF.

Affected (CNA)

Vendor / product	Versions
n/a / VitalPBX	affected 3.2.3-8

CWE

No CWE identifiers supplied.

References

https://fluidattacks.com/advisories/sharp/
https://vitalpbx.com/

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/sharp/
https://vitalpbx.com/

CISA-ADP

No English description supplied.

No references supplied.