Multiple issues with vm and parking apps from digium phones

[jfinstrom (James Finstrom)]

Please note your phone apps version and note a security released just happened

0 Day FreePBX Exploit?

I was made aware of a new zero-day FreePBX exploit today - apparently it affects Phone Apps, even if you’re not using Phone Apps in a licensed capacity. Does anyone have any information on this? Apparently, and earlier post on the subject was pulled down? Do we have any sort of statement from Sangoma or an ETA for a security fix? Should we be closing down the public facing Phone Apps port for all customers? -Chris

If the fixing it requires you to go to an exploitable version you probably don’t want to do that.