[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQKaH8Ya2w4mY_5_qRQj48-ui73KhvOKyVdOiJnz1Wcg":3,"g5a-risk:CVE-2009-1802":174},{"success":4,"data":5,"meta":172},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":75,"references":76,"referencesCount":103,"weaknesses":104,"weaknessesCount":113,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":170,"notableEvents":171},"CVE-2009-1802","What is CVE-2009-1802?","Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact.","Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers t...","2009-05-28T14:30:00.377","2026-06-16T23:08:05.133",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,6.4,false,[],0.00581,[33,33,33,33,33,33,33],"Medium",[37,41,44,47,50,53,56,59,62,65,68,72],{"vendor":38,"product":38,"version":39,"criteria":40,"vulnerable":4},"freepbx","2.4","cpe:2.3:a:freepbx:freepbx:2.4:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":42,"criteria":43,"vulnerable":4},"2.4.0_beta1","cpe:2.3:a:freepbx:freepbx:2.4.0_beta1:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":45,"criteria":46,"vulnerable":4},"2.4.0_beta2","cpe:2.3:a:freepbx:freepbx:2.4.0_beta2:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":48,"criteria":49,"vulnerable":4},"2.4.1","cpe:2.3:a:freepbx:freepbx:2.4.1:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":51,"criteria":52,"vulnerable":4},"2.5","cpe:2.3:a:freepbx:freepbx:2.5:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":54,"criteria":55,"vulnerable":4},"2.5.0_beta1","cpe:2.3:a:freepbx:freepbx:2.5.0_beta1:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":57,"criteria":58,"vulnerable":4},"2.5.0rc2","cpe:2.3:a:freepbx:freepbx:2.5.0rc2:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":60,"criteria":61,"vulnerable":4},"2.5.0rc3","cpe:2.3:a:freepbx:freepbx:2.5.0rc3:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":63,"criteria":64,"vulnerable":4},"2.5.1","cpe:2.3:a:freepbx:freepbx:2.5.1:*:*:*:*:*:*:*",{"vendor":38,"product":38,"version":66,"criteria":67,"vulnerable":4},"2.5.2","cpe:2.3:a:freepbx:freepbx:2.5.2:*:*:*:*:*:*:*",{"vendor":69,"product":38,"version":70,"criteria":71,"vulnerable":4},"sangoma","2.4.0","cpe:2.3:a:sangoma:freepbx:2.4.0:*:*:*:*:*:*:*",{"vendor":69,"product":38,"version":73,"criteria":74,"vulnerable":4},"2.5.0","cpe:2.3:a:sangoma:freepbx:2.5.0:*:*:*:*:*:*:*",12,[77,81,85,90,95,97,99,101],{"url":78,"source":79,"tags":80},"http:\u002F\u002Ffreepbx.org\u002Ftrac\u002Fticket\u002F3660","Freepbx",[],{"url":82,"source":83,"tags":84},"http:\u002F\u002Fosvdb.org\u002F54262","Osvdb",[],{"url":86,"source":87,"tags":88},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34772","Secunia",[89],"Vendor Advisory",{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F34857","Securityfocus",[94],"Patch",{"url":78,"source":79,"tags":96},[],{"url":82,"source":83,"tags":98},[],{"url":86,"source":87,"tags":100},[89],{"url":91,"source":92,"tags":102},[94],8,[105],{"id":106,"name":107,"description":108,"extendedDescription":109,"status":110,"abstraction":111,"structure":112},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2009-1802? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-1802, a medium severity cyber security vulnerability from 2009. Multiple cross-site request forgery (CSRF) vulnerabilities...","CVE-2009-1802, CVE-2009-1802 vulnerability, CVE-2009-1802 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, freepbx security, freepbx vulnerability","\u002Fwhat-is\u002Fcve-2009-1802",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":10,"dateModified":11,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-1802","Cybersecurity","CVE-2009-1802, CVE-2009-1802 vulnerability, CVE-2009-1802 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141],{"Operator":28,"Negate":28,"Nodes":142},[143],{"Operator":144,"Negate":31,"CPEMatch":145},"OR",[146,148,150,152,154,156,158,160,162,164,166,168],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":147,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"455E97D6-B069-49D6-B510-3D4112A9E1B3",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BF1E1278-3114-4BD1-B589-30B5313C9502",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":151,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"32D216B0-31D6-4288-8773-FB2438944492",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":153,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0A09E3F0-E1A6-4CC4-8134-89DF5DB6EA3B",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":155,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"5B2C1156-93B6-4D71-8D9C-ED6FC6C0AE74",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":157,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"11ACC1C9-A2C3-41CA-B608-C474B642A380",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":159,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D8A021AB-A142-4DAD-9EB0-2352C625D8CC",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":161,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9C0B173F-2161-4E40-A712-90DA6B997820",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":163,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"613A39A4-976E-4535-9408-533F957F7F87",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":165,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B5B657C6-A2DF-432A-9F46-1157C630CB20",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":167,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9734B50E-BEA8-41DF-835F-7B15A9BB31E8",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":169,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E9645D4F-BB03-49AD-AE79-6FE990BF18FE",[],[],{"lastModified":11,"cacheTime":173,"version":22},1792437151761,{"score":175,"band":176,"action":177,"scoredAt":178},21,"Low","Monitor","2026-10-19T06:38:02.260004+00:00"]