CVE-2009-1802

2022-10-0316:23:59

mitre

www.cve.org

csrf

freepbx

remote attackers

admin authentication

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.4%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact.