FusionPBX before 5.2.0 does not validate a session.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24539.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:fusionpbx:fusionpbx:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "5.2.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "2f8bed375c124c1d7e36138acc6903fcfcf15a8f"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "ee202cd61dc9a79fb2d634b1ad21ff2416d531cb"
}
],
"source": "REFERENCES_COMMIT"
}
]
}