CVE-2023-37596

Summary

CVE-2023-37596 is a Cross-Site Request Forgery (CSRF) vulnerability affecting issabel-pbx version 4.0.0-6. This issue allows a remote attacker to initiate a denial of service by crafting a malicious script designed to be processed by the deleteuser function. Successful exploitation results in the targeted system performing undesirable actions, potentially leading to unintended changes or downtime. To mitigate this risk, it is recommended to update to the latest version of issabel-pbx or implement CSRF tokens to secure user input.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.