CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43405

CVE-2021-43405 : FusionPBX before 4.5.30 is vulnerable due to fax_extension allowing non-numeric characters, which can enable authenticated remote code execution via fax_send.php (as shown in exploits for 4.5.29). Affected: FusionPBX client/server component handling fax extension input. Impact: p...