CVE-2024-57520

Asterisk version v22 contains an insecure permissions vulnerability in the action_createconfig function. This flaw could allow a remote attacker to execute arbitrary code , though the supplier disputes this impact, suggesting the attack is limited to directory traversal for creating empty files a...