← Back to CVE List

CVE-2023-0480

Published: 2023-04-04T23:15Z
Last Modified: 2025-02-13T17:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. This is possible because the application is vulnerable to CSRF. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt