| عنوان | Eleveo Call Recording 9.7.0 Business Logic Bypass |
|---|
| الوصف | A Business Logic Bypass vulnerability exists in the /callrec/searchAction.do endpoint of Eleveo Call Recording 9.7.0, allowing authenticated users to bypass the 31-day search range restriction. By modifying query builder parameters, users can craft arbitrary queries against the recordings table, retrieving recordings outside the intended search window or targeting columns not exposed via the GUI. The backend does not properly validate user input or enforce access restrictions on the query builder, enabling unauthorized access to restricted data.
Impact
• Unauthorized access to call recordings at once, bypassing the 31-day search limitation.
• Exposure of sensitive data, including recordings and columns not available through the standard interface.
• Potential SQL injection, allowing crafted queries that could expose additional data or bypass further access controls.
• Performance degradation may occur if large volumes of call records are retrieved in a single query, potentially impacting system availability.
PoC
Comprehensive reproduction steps, including supporting screenshots, are available via the shared private link. Public disclosure will occur on GitHub after the responsible disclosure period of approximately 90 days has elapsed.
Note
Contact with the vendor was initiated on March 10, and no response has been received as of the submission date. The provided PoC is accessible via a restricted link and is intended solely for review purposes by anyone possessing the link. I plan to reserve a CVE early, with public disclosure scheduled after 90 days from the initial contact date, at which point the advisory will be published on my GitHub repository. The information shared here is provided exclusively to the VulnDB team to ensure awareness and understanding of the vulnerability details.
|
|---|
| المصدر | ⚠️ https://drive.google.com/file/d/16y5IDrRDrARBtGETXUHhkSgFN38b-c6C/view?usp=sharing |
|---|
| المستخدم | omarelshopky (UID 85487) |
|---|
| ارسال | 18/07/2026 03:02 PM (2 أشهر منذ) |
|---|
| الاعتدال | 28/09/2026 10:11 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 410996 [Eleveo Call Recording Software 9.7.0 Query Builder /callrec/searchAction.do تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|