CVE-2023-37598

MediumCVSS 4.5

Published: 13/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

CVE-2023-37598 in issabel-pbx version 4.0.0-6 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to cause a denial of service via the delete new virtual fax function.

Risk Assessment

An attacker can exploit this vulnerability to disrupt the system's operation, potentially leading to loss of availability of fax services within the organization.

Recommendation

It is recommended to upgrade to the latest version of issabel-pbx to mitigate this vulnerability and implement additional security measures against CSRF attacks.

Original NVD description (English source)

A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete new virtual fax function.