Advisories · Technology
FreePBX framework.
Every CVE that names FreePBX framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
- FreePBX framework
- CWE-15
- CVSS 8.8 High
FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher
- FreePBX Framework
- Cross-site request forgery (CSRF)
- CVSS 5.7 Medium
Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation
- FreePBX framework
- CWE-426
- CVSS 9.3 CriticalCritical · CVSS 9+
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
- FreePBX framework
- Authentication bypass
- CVSS 6.6 Medium
FreePBX vulnerable to unauthenticated Denial of Service
- FreePBX framework
- Path traversal
- CVSS 6.3 Medium
FreePBX Post-Authenticated Command Injection
- FreePBX framework
- Command injection