PT-2021-21670
CVE-2021-37456
·
Published
2021-07-25
·
Updated
2021-07-28
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NCH Axon PBX versions 2.22 and earlier
Description
Cross Site Scripting (XSS) exists via the blacklist IP address (stored).
Recommendations
For versions 2.22 and earlier, consider disabling the blacklist IP address feature until a patch is available. Restrict access to the affected area to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾