CVE-2021-45310

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted b...

CVE-2021-45310

CVE-2021-45310 affects Sangoma Switchvox version 102409 and is an information-disclosure vulnerability caused by improper access restriction. An unauthenticated HTTP GET to https://Switchvox-IP/main?cmd=invalid_browser (and related invalid_browse URL) can exfiltrate user data such as first/last n...