PT-2024-35778

Name of the Vulnerable Software and Affected Versions FreePBX version 17.0.19.17 Description A vulnerability was discovered in FreePBX, allowing high-privilege administrators to insert unwanted files due to a lack of verification of the type of uploaded files. This issue can be exploited for remo...

CVE-2024-53564: Unrestricted Upload of File with Dangerous Type

A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded valid FreePBX module files, allowing high-privilege administrators to insert unwanted files. NOTE: the Supplier's position is that there is no risk beyond what high-privilege administrators are...