Unscored CVE-2022-24259 EUVD-2022-29166GHSA-j49m-fvhp-27f5

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a …

Published Feb 4, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.

References

https://www.voipmonitor.org/changelog-gui?major=5
https://kerbit.io/research/read/blog/3