CVE-2023-37599

Summary

CVE-2023-37599 is a newly disclosed vulnerability in issabel-pbx version 4.0.0-6. This issue grants remote attackers access to sensitive information through the modules directory. By exploiting this vulnerability, an adversary can gain unauthorized access to confidential data, potentially leading to significant security risks. The exact nature of the information at risk and the specific methods of exploitation have not been disclosed, but it is recommended that users upgrade to the latest version of issabel-pbx as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.