| Package | Affected versions | Patched versions |
|---|---|---|
| freepbx | = 2.4= 2.4.0_beta1= 2.4.0_beta2= 2.4.1= 2.5= 2.5.0_beta1= 2.5.0rc2= 2.5.0rc3= 2.5.1= 2.5.2 | |
| freepbx | = 2.4.0= 2.5.0 |
Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free