medium6.5
CVE-2021-37440
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/..
Impact
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nch | Axon Pbx | through 2.22 |