Xorcom CompletePBX <= 5.2.35 Authenticated Path Traversal & File Deletion
36Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 8.3epss 1.8%
de la publicación al arma0 días
Publicada en NVD31 mar
metasploit2 mar
probabilidad de explotación
1.8%top 23% de las CVE
explotación observada
noninguna fuente lo reporta
Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading of arbitrary files and additionally delete any retrieved file in place of the expected report.
This issue affects CompletePBX: all versions up to and prior to 5.2.35
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Productos afectados
Xorcom · CompletePBX