Summary
The FreePBX backup module does not properly sanitize data during restore operations, potentially leading to compromise if the backup contains carefully crafted hostile data.
Authentication with a known username that has sufficient access permissions and/or write access to backup files is required.
Common Vulnerabilities and Exposures (CVE)
Requested
GitHub Security Advisory (GHSA)
GHSA-fwpm-x5rh-2pr6
Provider Urgency (choice of: Not Defined, Clear, Green, Amber, or Red)
A - Amber
Link to Published GHSA with More Details
Highlights
