CVE-2021-43403
An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessa…
Published: 2021-11-05 · CVSS: Unscored
An issue was discovered in FusionPBX before 4.5.30. The log_viewer.php Log View page allows an authenticated user to choose an arbitrary filename for download (i.e., not necessarily freeswitch.log in the intended directory).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7