CVE-2021-4283

MÉDIO 5.4CVE-2021-4283 · Published 27/12/2022 · updated 17/06/2026

Em resumo

CVE-2021-4283 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta voicemail (sangoma).
Chance de exploração nos próximos 30 dias (EPSS): 0.56%, maior que 46.5% das vulnerabilidades.
Correção: atualize para 14.0.6.25 ou posterior.

Package	Affected versions	Patched versions
voicemail sangoma	`< 14.0.6.25`	`14.0.6.25`

Description

A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched remotely. Upgrading to version 14.0.6.25 is able to address this issue. The name of the patch is ffce4882016076acd16fe0f676246905aa3cb2f3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216872.

References

FreePBX/voicemail commit ffce488 · Patch
FreePBX/voicemail release release/14.0.6.25 · Release Notes
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Mais vulnerabilidades de voicemail

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free