Advisories · Technology
FreePBX api.
Every CVE that names FreePBX api among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
FreePBX api module Command Injection via GraphQL
- FreePBX api
- Command injection
- CVSS 2.0 Low
FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
- FreePBX api
- Privilege escalation
- CVSS 5.1 Medium
api: Shared OAuth Signing Key Between Different Instances
- FreePBX api
- Hard-coded credentials