CVE-2021-43403 in FusionPBX

Sumário

de MITRE • 29/09/2022

An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessarily freeswitch.log in the intended directory).

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 05/11/2021
• Divulgação: 29/09/2022
• Moderação: aceite
• Entrada: VDB-209717
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 6.5 (NVD)
• EPSS: 0.00897
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-43403
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-43403
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-43403/