Skip to content
OpenAdvisories
Unscored CVE-2023-39285 EUVD-2023-43017GHSA-vrx7-2p85-8v7j

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attac…

Published Sep 14, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attacker to perform a Cross Site Request Forgery (CSRF) attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modified URL, potentially enabling them to modify system configuration settings.

References