CVE-2024-57520

Asterisk version 22 is impacted by an Insecure Permissions vulnerability in the action_createconfig function. This flaw could allow a remote attacker to execute arbitrary code. However, the supplier disputes this, stating the impact is limited to directory traversal (creating empty files outside ...