issabel-pbx v.4.0.0-6 vulnerabilities
4 known CVE vulnerabilities in issabel-pbx v.4.0.0-6, translated and rated.
- CVE-2023-37599High
Version 4.0.0-6 of issabel-pbx contains a vulnerability that allows a remote attacker to obtain sensitive information via the modules directory.
- CVE-2023-37598Medium
CVE-2023-37598 in issabel-pbx version 4.0.0-6 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to cause a denial of service via the delete new virtual fax function.
- CVE-2023-37597High
CVE-2023-37597 in issabel-pbx version 4.0.0-6 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to cause a denial of service via the delete user grouplist function.
- CVE-2023-37596High
CVE-2023-37596 in issabel-pbx version 4.0.0-6 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function.