FreePBX 安全漏洞

FreePBX formerly known as Asterisk Management Portal is a suite of tools from the FreePBX project for configuring Asterisk an IP telephony system via a GUI web-based graphical interface. A security vulnerability exists in FreePBX versions 1805 through 2203 that stems from the use of hard-coded...

CVE-2023-26566

Sangoma FreePBX versions 1805 through 2203 on Linux are vulnerable to unauthorized access due to hardcoded credentials for the Asterisk REST Interface (ARI) . A remote attacker can exploit this by sending HTTP and WebSocket requests to the API to reconfigure Asterisk and perform internal or exter...