CVE-2020-21055

Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7

Description: A Directory Traversal issue exists, allowing malicious users to rename any file on the system. This is achieved via the folder, filename, and newfilename variables in the appeditfilerename.php file.

Recommendations: For FusionPBX version 4.5.7, consider restricting access to the appeditfilerename.php file until a patch is available. As a temporary workaround, avoid using the folder, filename, and newfilename variables in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.