Issabel vulnerabilities
We track 3 vulnerabilities in Issabel products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2024.
Latest Issabel vulnerabilities
- 9.8 Critical severity
PBX: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injec
- 8.1 High severity
Pbx: Cross-Site Request Forgery
Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function.
- 8.1 High severity
Pbx: Cross-Site Request Forgery
Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function.