PT-2021-10580
CVE-2020-21057
·
تاريخ النشر
2021-05-20
·
تاريخ التحديث
2021-05-25
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
FusionPBX version 4.5.7
Description:
A Directory Traversal issue allows a remote malicious user to delete folders on the system. This is achieved by exploiting the
folder variable in the "/app/edit/folderdelete.php" endpoint.Recommendations:
For FusionPBX version 4.5.7, consider restricting access to the "/app/edit/folderdelete.php" endpoint until a patch is available. As a temporary workaround, avoid using the
folder variable in this endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾