CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

Session fixation

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

Design/Logic Flaw

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43406

FusionPBX is affected before version 4.5.30. The issue stems from fax_post_size not being constrained to preset values, allowing risky characters to pass to downstream handling. CVSSv3.1 base score is 8.8 (HIGH), with network attack, low complexity, privileges required: LOW, no user interaction. ...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43404

CVE-2021-43404 affects FusionPBX prior to 4.5.30, where the FAX file name may contain risky characters. The issue is defined with both CVSS vectors (2.0: 6.5 (MEDIUM), 3.1: 8.8 (HIGH)) indicating network-accessible impact with high confidentiality, integrity, and availability implications. Connec...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...