CVE-2021-43406

FusionPBX is affected before version 4.5.30. The issue stems from fax_post_size not being constrained to preset values, allowing risky characters to pass to downstream handling. CVSSv3.1 base score is 8.8 (HIGH), with network attack, low complexity, privileges required: LOW, no user interaction. ...