PT-2026-99960 · Freepbx · Freepbx
CVSS v4.0
8.6
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
FreePBX versions prior to 16.0.72
FreePBX versions prior to 17.0.7
Description
A flaw in the backup Module allows authenticated attackers with sufficient permissions or write access to backup files to execute arbitrary code on the server. The issue stems from improper path sanitization within the backup restore functionality, which enables the upload of malicious PHP files to the web root directory.
Recommendations
Update to version 16.0.72 or later.
Update to version 17.0.7 or later.
Fix
Path traversal
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freepbx