PT-2021-21669
CVE-2021-37455
·
Published
2021-07-25
·
Updated
2021-07-28
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NCH Axon PBX versions 2.22 and earlier
Description
Cross Site Scripting (XSS) exists via the outbound dialing plan (stored).
Recommendations
For versions 2.22 and earlier, consider disabling the outbound dialing plan feature until a patch is available.
Restrict access to the stored outbound dialing plan to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾