Pbx vulnerabilities

3 known vulnerabilities in Pbx from Issabel. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  PBX: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-0986Jan 29, 2024IssabelEPSS 58.2%

  A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injec

• 8.1 High severity

  Pbx: Cross-Site Request Forgery

  CVE-2023-37597Jul 11, 2023Issabel

  Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function.

• 8.1 High severity

  Pbx: Cross-Site Request Forgery

  CVE-2023-37596Jul 11, 2023Issabel

  Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function.