Lucene search
MitreCVELIST:CVE-2019-16990HistoryOct 21, 2019 - 2:20 p.m.
CVE-2019-16990
2019-10-2114:20:53
mitre
www.cve.org
0.001 Low
EPSS
Percentile
39.7%
In FusionPBX up to v4.5.7, the file app/music_on_hold/music_on_hold.php uses an unsanitized “file” variable coming from the URL, which takes any pathname (base64 encoded) and allows a download of it.
Related
prion
prion
Design/Logic Flaw
2019-10-21 15:15:00
cve
cve
CVE-2019-16990
2019-10-21 15:15:10
nvd
nvd
CVE-2019-16990
2019-10-21 15:15:10