CVE-2023-43336

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101...

PT-2023-28785 · Sangoma Technologies · Freepbx

Name of the Vulnerable Software and Affected Versions: Sangoma Technologies FreePBX versions prior to 15.0.18 Sangoma Technologies FreePBX versions prior to 16.0.40 Description: The issue is related to an access control problem that can be exploited by modifying a parameter value. For example,...

CVE-2023-43336

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101...

FreePBX Security Vulnerabilities

FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk an IP telephony system through a GUI web-based graphical interface. A security vulnerability exists in FreePBX that stems from the presence of an access control error issue...