Vulnerability in FusionPBX Before 5.2.0 Allows Session Validation bypass
CVE-2024-24539

5.3MEDIUM

Key Information:

Vendor

FusionPBX

Status
Fusionpbx
Vendor
CVE Published:
18 March 2024

What is CVE-2024-24539?

FusionPBX before 5.2.0 does not validate a session.

References

https://github.com/fusionpbx/fusionpbx/commit/ee202cd61dc...
https://github.com/fusionpbx/fusionpbx/commit/2f8bed375c1...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.