CVE-2023-22286

Published: 2023-01-17T10:15Z

Last Modified: 2025-04-04T18:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to hijack the user authentication and conduct user's unintended operations by having a user to view a malicious page while logged in. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt