CVE-2021-45967

creationtimestamp| type| source ---|---|--- 2022-03-18 11:22:24+00:00| seen| https://t.me/cibsecurity/39189 2023-12-21 17:42:26+00:00| seen| https://t.me/arpsyndicate/2054 2025-03-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-09 2025-03-09 00:00:00+00:00|...

CVE-2021-45967

Pascom Cloud Phone System before 7.20.x is affected by a path traversal vulnerability caused by a configuration mismatch between NGINX and the backend Tomcat, exposing unintended endpoints. Multiple connected sources corroborate a pre-7.20.x issue with path traversal (and related exposure). Remed...