Description
A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreePBX | FreePBX Framework | 17.0 | — |
References
- Product third-party-advisory
- Vulnerable File technical-description