CVE-2021-37524

概要

参考情報

• fusionpbx/fusionpbx commit c3b8113 · Patch
• fusionpbx.com/app/tickets/ticket_edit.php · Permissions Required

fusionpbx のその他の脆弱性

• CVE-2024-24539中 5.3FusionPBX before 5.2.0 does not validate a session.
• CVE-2024-23387中 4.8FusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is exploited by a remote authenticated attacke…
• CVE-2021-43403中 6.5An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary fil…
• CVE-2022-35153緊急 9.8FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.
• CVE-2022-28055緊急 9.8Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.