PT-2021-21669
CVE-2021-37455
·
تاريخ النشر
2021-07-25
·
تاريخ التحديث
2021-07-28
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NCH Axon PBX versions 2.22 and earlier
Description
Cross Site Scripting (XSS) exists via the outbound dialing plan (stored).
Recommendations
For versions 2.22 and earlier, consider disabling the outbound dialing plan feature until a patch is available.
Restrict access to the stored outbound dialing plan to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾