Summary
A low-privilege authenticated Sangoma Connect / UCP user, an ordinary extension user and not an administrator, can perform blind SQL injection against the Sangoma Connect RT API and read the entire FreePBX application database.
Authentication with a known UCP username is required.
Common Vulnerabilities and Exposures (CVE)
Requested
GitHub Security Advisory (GHSA)
GHSA-3827-8r8q-362j
Provider Urgency (choice of: Not Defined, Clear, Green, Amber, or Red)
A - Amber
Link to Published GHSA with More Details
Highlights
