CVE-2024-24539

MEDIUM

Published Mar 18, 2024 Modified May 23, 2025

Description

FusionPBX before 5.2.0 does not validate a session.

Is your site exposed to CVE-2024-24539?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Versions
fusionpbx	fusionpbx	< 5.2.0

References

Advisories & Patches

https://github.com/fusionpbx/fusionpbx/commit/2f8bed375c124c1d7e36138acc6903fcfcf15a8f https://github.com/fusionpbx/fusionpbx/commit/ee202cd61dc9a79fb2d634b1ad21ff2416d531cb https://github.com/fusionpbx/fusionpbx/commit/2f8bed375c124c1d7e36138acc6903fcfcf15a8f https://github.com/fusionpbx/fusionpbx/commit/ee202cd61dc9a79fb2d634b1ad21ff2416d531cb

Frequently Asked Questions

What is CVE-2024-24539? +

FusionPBX before 5.2.0 does not validate a session. It has a CVSS v3.1 base score of 5.3 (MEDIUM).

How severe is CVE-2024-24539? +

CVE-2024-24539 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-24539? +

CVE-2024-24539 affects products from fusionpbx, specifically: fusionpbx. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-24539? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.