Skip to content
Sign in
8.8 High

CVE-2023-0480 VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account

Description

VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF.

Affected products and versions

Product Affected versions Fixed in
VitalPBX 3.2.3-8 No fix stated

Other CVEs of VitalPBX

The 2 CVEs of VitalPBX →
CVE-2023-0486 VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's administrator account… 6.1 Medium
Track this CVE