Summary
Custom Music on Hold applications allow some dangerous options that can result in privilege escalation and execution of commands on the host as the Asterisk service user (typically asterisk.)
Authentication with an existing FreePBX administrator account is required.
Common Vulnerabilities and Exposures (CVE)
Requested
GitHub Security Advisory (GHSA)
GHSA-p97w-rq48-p8q2
Provider Urgency (choice of: Not Defined, Clear, Green, Amber, or Red)
G - Green
Link to Published GHSA with More Details
Highlights
