CVE-2018-7654

概要

参考情報

• rootlabs.com.br/path-traversal-in-3cx · Third Party Advisory
• medium.com/stolabs/path-traversal-in-3cx-7421a8ffdb7a · Third Party Advisory

3cx のその他の脆弱性

• CVE-2023-27362高 7.83CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on a…
• CVE-2023-49954緊急 9.8The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address…
• CVE-2022-48483高 7.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dow…
• CVE-2022-48482高 7.53CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electr…
• CVE-2023-29059高 7.83CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18…