{"id":"CVE-2024-24539","aliases":["EUVD-2024-21958","GHSA-j9wm-4628-fchr"],"status":"published","title":"FusionPBX before 5.2.0 does not validate a session.","description":"FusionPBX before 5.2.0 does not validate a session.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00526,"percentile":0.44893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-03-18T00:00:00Z","modified":"2026-10-28T02:30:40Z","products":[{"vendor":"fusionpbx","product":"fusionpbx"}],"references":[{"url":"https://github.com/fusionpbx/fusionpbx/commit/ee202cd61dc9a79fb2d634b1ad21ff2416d531cb","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/fusionpbx/fusionpbx/commit/2f8bed375c124c1d7e36138acc6903fcfcf15a8f","tags":["x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24539","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j9wm-4628-fchr"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24539.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-24539","description":"FusionPBX before 5.2.0 does not validate a session.","status":"published","published":"2024-03-18T00:00:00Z","modified":"2024-11-14T20:16:06.204Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:13.991836Z"}],"euvd":[{"id":"EUVD-2024-21958","description":"FusionPBX before 5.2.0 does not validate a session.","status":"published","published":"2024-03-18T00:00:00Z","modified":"2024-11-14T20:16:06Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:59.953537Z"}],"ghsa":[{"id":"GHSA-j9wm-4628-fchr","title":"FusionPBX before 5.2.0 does not validate a session.","description":"FusionPBX before 5.2.0 does not validate a session.","status":"published","published":"2024-03-18T03:30:32Z","modified":"2024-11-15T00:31:50Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T14:58:50.830346Z"}],"nvd":[{"id":"CVE-2024-24539","description":"FusionPBX before 5.2.0 does not validate a session.","status":"published","published":"2024-03-18T03:15:06.067Z","modified":"2026-06-17T07:14:34.633Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:09:41.654534Z"}],"osv":[{"id":"CVE-2024-24539","description":"FusionPBX before 5.2.0 does not validate a session.","status":"published","published":"2024-03-18T00:00:00Z","modified":"2026-10-28T02:30:40.704017938Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:38.897406Z"}]}}