CVE-2021-43403

An issue was discovered in FusionPBX before 4.5.30

published November 5, 2021

CVSS
—
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessarily freeswitch.log in the intended directory).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00927 · 60.1th percentile
Published
2021-11-05T17:36Z
EPSS history
Timeline
  • 05 NOV 17:36Z
    An issue was discovered in FusionPBX before 4.5.30
    cvelistv5