CVE-2022-24259

Опубликовано: 04 фев. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.

Ссылки

https://kerbit.io/research/read/blog/3
Exploit
Third Party Advisory
https://www.voipmonitor.org/changelog-gui?major=5
Release Notes
Vendor Advisory
https://kerbit.io/research/read/blog/3
Exploit
Third Party Advisory
https://www.voipmonitor.org/changelog-gui?major=5
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:voipmonitor:voipmonitor:*:*:*:*:*:*:*:*

Версия до 24.96 (исключая)

EPSS

Процентиль: 86%

0.02918

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-j49m-fvhp-27f5