CVE-2024-23387 — FusionPBX / FusionPBX

Description (CNA)

FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacker with an administrative privilege, an arbitrary script may be executed on the web browser of the user who is logging in to the product.

Affected (CNA)

Vendor / product	Versions
FusionPBX / FusionPBX	affected prior to 5.1.0

CWE

No CWE identifiers supplied.

References

https://www.fusionpbx.com/
https://github.com/fusionpbx/fusionpbx/
https://jvn.jp/en/jp/JVN67215338/

ADP enrichment

CVE

No English description supplied.

https://www.fusionpbx.com/
https://github.com/fusionpbx/fusionpbx/
https://jvn.jp/en/jp/JVN67215338/

CISA-ADP

No English description supplied.

No references supplied.